--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b45ed4f9cd81476aa9ebaeb6b80fa7436092b8dd6038b9ef32abd258b07b9e"}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b45ed4f9cd81476aa9ebaeb6b80fa7436092b8dd6038b9ef32abd258b07b9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39b45ed4f9cd81476aa9ebaeb6b80fa7436092b8dd6038b9ef32abd258b07b9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b45ed4f9cd81476aa9ebaeb6b80fa7436092b8dd6038b9ef32abd258b07b9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b45ed4f9cd81476aa9ebaeb6b80fa7436092b8dd6038b9ef32abd258b07b9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b45ed4f9cd81476aa9ebaeb6b80fa7436092b8dd6038b9ef32abd258b07b9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39b45ed4f9cd81476aa9ebaeb6b80fa7436092b8dd6038b9ef32abd258b07b9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"976f880dc5db972a3250983fc45d59a36308d2c8620e568ff907a05c0e376bc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b45ed4f9cd81476aa9ebaeb6b80fa7436092b8dd6038b9ef32abd258b07b9e"}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"976f880dc5db972a3250983fc45d59a36308d2c8620e568ff907a05c0e376bc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b45ed4f9cd81476aa9ebaeb6b80fa7436092b8dd6038b9ef32abd258b07b9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39b45ed4f9cd81476aa9ebaeb6b80fa7436092b8dd6038b9ef32abd258b07b9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976f880dc5db972a3250983fc45d59a36308d2c8620e568ff907a05c0e376bc8"}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b45ed4f9cd81476aa9ebaeb6b80fa7436092b8dd6038b9ef32abd258b07b9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebf99946cd978065b835a0387e4ede6f0eaaf90a046031311946599709a8bb89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b45ed4f9cd81476aa9ebaeb6b80fa7436092b8dd6038b9ef32abd258b07b9e"}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebf99946cd978065b835a0387e4ede6f0eaaf90a046031311946599709a8bb89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"976f880dc5db972a3250983fc45d59a36308d2c8620e568ff907a05c0e376bc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["976f880dc5db972a3250983fc45d59a36308d2c8620e568ff907a05c0e376bc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"976f880dc5db972a3250983fc45d59a36308d2c8620e568ff907a05c0e376bc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39b45ed4f9cd81476aa9ebaeb6b80fa7436092b8dd6038b9ef32abd258b07b9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebf99946cd978065b835a0387e4ede6f0eaaf90a046031311946599709a8bb89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebf99946cd978065b835a0387e4ede6f0eaaf90a046031311946599709a8bb89"}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebf99946cd978065b835a0387e4ede6f0eaaf90a046031311946599709a8bb89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"976f880dc5db972a3250983fc45d59a36308d2c8620e568ff907a05c0e376bc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976f880dc5db972a3250983fc45d59a36308d2c8620e568ff907a05c0e376bc8"}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"976f880dc5db972a3250983fc45d59a36308d2c8620e568ff907a05c0e376bc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebf99946cd978065b835a0387e4ede6f0eaaf90a046031311946599709a8bb89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebf99946cd978065b835a0387e4ede6f0eaaf90a046031311946599709a8bb89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebf99946cd978065b835a0387e4ede6f0eaaf90a046031311946599709a8bb89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b45ed4f9cd81476aa9ebaeb6b80fa7436092b8dd6038b9ef32abd258b07b9e"}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"976f880dc5db972a3250983fc45d59a36308d2c8620e568ff907a05c0e376bc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["976f880dc5db972a3250983fc45d59a36308d2c8620e568ff907a05c0e376bc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebf99946cd978065b835a0387e4ede6f0eaaf90a046031311946599709a8bb89"}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"976f880dc5db972a3250983fc45d59a36308d2c8620e568ff907a05c0e376bc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebf99946cd978065b835a0387e4ede6f0eaaf90a046031311946599709a8bb89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b"}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"976f880dc5db972a3250983fc45d59a36308d2c8620e568ff907a05c0e376bc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976f880dc5db972a3250983fc45d59a36308d2c8620e568ff907a05c0e376bc8"}
{"level":"error","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b"}
{"level":"error","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b"}
{"level":"debug","ts":"2026-07-02T20:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b"}
{"level":"info","ts":"2026-07-02T20:25:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12ca799c-4b26-4d44-9a6e-09ad99838e2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47468","PortSpecifier":{"PortValue":47468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12ca799c-4b26-4d44-9a6e-09ad99838e2f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-669041.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:25:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12ca799c-4b26-4d44-9a6e-09ad99838e2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47468","PortSpecifier":{"PortValue":47468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783023931,"nanos":752455758},"http":{"id":"12ca799c-4b26-4d44-9a6e-09ad99838e2f","method":"POST","headers":{":authority":"e2e-inf-a-669041.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:25:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"12ca799c-4b26-4d44-9a6e-09ad99838e2f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:25:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12ca799c-4b26-4d44-9a6e-09ad99838e2f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12ca799c-4b26-4d44-9a6e-09ad99838e2f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fd7ce6c93f85441137c655d5dee632202d6c2a31dafa38e002185be8f22e7978"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-669041.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12ca799c-4b26-4d44-9a6e-09ad99838e2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12ca799c-4b26-4d44-9a6e-09ad99838e2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12ca799c-4b26-4d44-9a6e-09ad99838e2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-669041/test-model-669041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"12ca799c-4b26-4d44-9a6e-09ad99838e2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12ca799c-4b26-4d44-9a6e-09ad99838e2f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12ca799c-4b26-4d44-9a6e-09ad99838e2f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:25:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12ca799c-4b26-4d44-9a6e-09ad99838e2f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:25:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12ca799c-4b26-4d44-9a6e-09ad99838e2f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59218","PortSpecifier":{"PortValue":59218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","method":"POST","path":"/ai-tenant-e2e-inf-a-669041/test-model-669041/v1/chat/completions","host":"e2e-inf-a-669041.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59218","PortSpecifier":{"PortValue":59218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783023935,"nanos":816707692},"http":{"id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","method":"POST","headers":{":authority":"e2e-inf-a-669041.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-669041/test-model-669041/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VJMxZq3xlbSDoLEn_awUQdpLD4AjYTsnsJH2rGkeYipmNfMM5g76aE9PDhO0"}
{"level":"debug","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-669041.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VJMxZq3xlbSDoLEn_awUQdpLD4AjYTsnsJH2rGkeYipmNfMM5g76aE9PDhO0\"}"}
{"level":"debug","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-669041.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"11884026-dc14-4317-8173-288626798536","keyName":"e2e-tenant-inference-669041","subscription":"test-model-669041-sub","tenant":"e2e-inf-a-669041","userId":"11884026-dc14-4317-8173-288626798536","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-669041.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-669041/test-model-669041\",\"requestedSubscription\":\"test-model-669041-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-669041.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-669041","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-669041-sub","namespace":"ai-tenant-e2e-inf-a-669041","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-669041/test-model-669041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-669041-sub"}
{"level":"debug","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"11884026-dc14-4317-8173-288626798536","keyName":"e2e-tenant-inference-669041","selected_subscription":"test-model-669041-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-669041/test-model-669041-sub@ai-tenant-e2e-inf-a-669041/test-model-669041","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-669041","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-669041-sub","namespace":"ai-tenant-e2e-inf-a-669041","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:25:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc8fe114-25bf-4716-ad64-3f4b3b4c5522","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9d1ceb0-1c86-4198-b861-76e76acc2172","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59232","PortSpecifier":{"PortValue":59232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9d1ceb0-1c86-4198-b861-76e76acc2172","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-669041.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9d1ceb0-1c86-4198-b861-76e76acc2172","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59232","PortSpecifier":{"PortValue":59232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783023936,"nanos":167386173},"http":{"id":"b9d1ceb0-1c86-4198-b861-76e76acc2172","method":"POST","headers":{":authority":"e2e-inf-a-669041.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b9d1ceb0-1c86-4198-b861-76e76acc2172","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9d1ceb0-1c86-4198-b861-76e76acc2172","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9d1ceb0-1c86-4198-b861-76e76acc2172","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fd7ce6c93f85441137c655d5dee632202d6c2a31dafa38e002185be8f22e7978"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-669041.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9d1ceb0-1c86-4198-b861-76e76acc2172","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9d1ceb0-1c86-4198-b861-76e76acc2172","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9d1ceb0-1c86-4198-b861-76e76acc2172","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-669041/test-model-669041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9d1ceb0-1c86-4198-b861-76e76acc2172","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9d1ceb0-1c86-4198-b861-76e76acc2172","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9d1ceb0-1c86-4198-b861-76e76acc2172","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9d1ceb0-1c86-4198-b861-76e76acc2172","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9d1ceb0-1c86-4198-b861-76e76acc2172","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca8c2a9b-3b0c-4149-a7ba-f9060feb1d30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37048","PortSpecifier":{"PortValue":37048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca8c2a9b-3b0c-4149-a7ba-f9060feb1d30","method":"POST","path":"/ai-tenant-e2e-inf-b-761cb8/test-model-761cb8/v1/chat/completions","host":"e2e-inf-b-761cb8.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca8c2a9b-3b0c-4149-a7ba-f9060feb1d30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37048","PortSpecifier":{"PortValue":37048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783023936,"nanos":206532959},"http":{"id":"ca8c2a9b-3b0c-4149-a7ba-f9060feb1d30","method":"POST","headers":{":authority":"e2e-inf-b-761cb8.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-761cb8/test-model-761cb8/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca8c2a9b-3b0c-4149-a7ba-f9060feb1d30","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OEJTpqPR4XT2HtYH_FwnuCvlnu8b7afLKK4oiPAnAOSu2hGvhBA5RXG4QYud"}
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca8c2a9b-3b0c-4149-a7ba-f9060feb1d30","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-761cb8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OEJTpqPR4XT2HtYH_FwnuCvlnu8b7afLKK4oiPAnAOSu2hGvhBA5RXG4QYud\"}"}
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca8c2a9b-3b0c-4149-a7ba-f9060feb1d30","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-761cb8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"ca8c2a9b-3b0c-4149-a7ba-f9060feb1d30","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-761cb8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca8c2a9b-3b0c-4149-a7ba-f9060feb1d30","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"39b45ed4f9cd81476aa9ebaeb6b80fa7436092b8dd6038b9ef32abd258b07b9e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-761cb8.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-761cb8/test-model-761cb8/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca8c2a9b-3b0c-4149-a7ba-f9060feb1d30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"ca8c2a9b-3b0c-4149-a7ba-f9060feb1d30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca8c2a9b-3b0c-4149-a7ba-f9060feb1d30","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-02T20:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca8c2a9b-3b0c-4149-a7ba-f9060feb1d30","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-02T20:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd7ce6c93f85441137c655d5dee632202d6c2a31dafa38e002185be8f22e7978"}
{"level":"info","ts":"2026-07-02T20:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d210c6fcafb9f82233c2a6b40dec59ee8a1c9f7bc0bead689d0868a13f2de973"}
{"level":"info","ts":"2026-07-02T20:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0ec4455a17d357172e28b062d006cef2508ee43b30ecddaeb218f3de95c1a31"}
{"level":"info","ts":"2026-07-02T20:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/776114e26bbf2065d93244b7425f34e6eda8d6e416cd3c45a7dc73b7f853dbab"}
{"level":"info","ts":"2026-07-02T20:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8249fc3d99b069a839147f72fabeb6484ed80fcc355b09456fedfe0f81b0566e"}
{"level":"info","ts":"2026-07-02T20:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1bde25dbdf77f39fd76c5cb43b4b603eddfe5ae947a451c27b68c2e31b14bc6"}
{"level":"info","ts":"2026-07-02T20:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39b45ed4f9cd81476aa9ebaeb6b80fa7436092b8dd6038b9ef32abd258b07b9e"}
{"level":"info","ts":"2026-07-02T20:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5f90a120d16778b4e534400c5cf7edfcc6696c8dc73292b672e9a97a4c4ee59"}
{"level":"info","ts":"2026-07-02T20:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5944679f4393255b1292da2e93c8bce2c9fdb8a0d753ad7387bc90e2aa13daa7"}
{"level":"info","ts":"2026-07-02T20:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2c0d6447ae7a19b3b91ff05bf67c8e1ec039840b7e11532198da097d9d15ed1"}
{"level":"info","ts":"2026-07-02T20:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/976f880dc5db972a3250983fc45d59a36308d2c8620e568ff907a05c0e376bc8"}
{"level":"info","ts":"2026-07-02T20:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba13507cb6d646774edffc5bcba087c99141b07be404c80ad8ae934f86f9d159"}
{"level":"info","ts":"2026-07-02T20:25:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93c0951b56f820b811d7e3eaf9d40110badf44fdbb24058ee39f949f0d064c4e"}
{"level":"info","ts":"2026-07-02T20:25:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/478f224c80fbee8f8f6013125ce7e59a31686e78af4bf244f61002d585b83317"}
{"level":"info","ts":"2026-07-02T20:25:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64870003c90e8f6bfb3d6afafbcb14cb1ed3653ff1deb042c5d58222c256ed0d"}
{"level":"info","ts":"2026-07-02T20:25:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7eec1b639d9bbc9a20a81db95373215c568fdd8a7c52f4169ebb8f40f90916bf"}
{"level":"info","ts":"2026-07-02T20:25:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38406cdc809cd9d7e3e738fc6550475b7406f3ae4d6534ba0b68abe27162a7a6"}
{"level":"info","ts":"2026-07-02T20:25:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebf99946cd978065b835a0387e4ede6f0eaaf90a046031311946599709a8bb89"}
{"level":"info","ts":"2026-07-02T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51d78697c8662effb0505c36e4e2015d6f4fbda1c6c4bac28364b60b11cb55a9"}
{"level":"info","ts":"2026-07-02T20:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94283be44051d3b217b2122ef1d38369d18791226bf9f4406a41c30d04c6950b"}
{"level":"debug","ts":"2026-07-02T20:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d48fba0694259bcd83864e61c13f282776a19f37f2733d61bd281ed2b2cb32fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d48fba0694259bcd83864e61c13f282776a19f37f2733d61bd281ed2b2cb32fc"}
{"level":"info","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d48fba0694259bcd83864e61c13f282776a19f37f2733d61bd281ed2b2cb32fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d48fba0694259bcd83864e61c13f282776a19f37f2733d61bd281ed2b2cb32fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d48fba0694259bcd83864e61c13f282776a19f37f2733d61bd281ed2b2cb32fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d48fba0694259bcd83864e61c13f282776a19f37f2733d61bd281ed2b2cb32fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d48fba0694259bcd83864e61c13f282776a19f37f2733d61bd281ed2b2cb32fc"}
{"level":"debug","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e26e0c1f6843b9d06b3f1b6644a06385bb91723f15669f6d21b0a99dd6a95495","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:26:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:26:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e26e0c1f6843b9d06b3f1b6644a06385bb91723f15669f6d21b0a99dd6a95495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d48fba0694259bcd83864e61c13f282776a19f37f2733d61bd281ed2b2cb32fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:26:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:26:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d48fba0694259bcd83864e61c13f282776a19f37f2733d61bd281ed2b2cb32fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e26e0c1f6843b9d06b3f1b6644a06385bb91723f15669f6d21b0a99dd6a95495"}
{"level":"info","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d48fba0694259bcd83864e61c13f282776a19f37f2733d61bd281ed2b2cb32fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e26e0c1f6843b9d06b3f1b6644a06385bb91723f15669f6d21b0a99dd6a95495","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:26:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:26:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e26e0c1f6843b9d06b3f1b6644a06385bb91723f15669f6d21b0a99dd6a95495"}
{"level":"info","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d48fba0694259bcd83864e61c13f282776a19f37f2733d61bd281ed2b2cb32fc"}
{"level":"info","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e26e0c1f6843b9d06b3f1b6644a06385bb91723f15669f6d21b0a99dd6a95495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d48fba0694259bcd83864e61c13f282776a19f37f2733d61bd281ed2b2cb32fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e26e0c1f6843b9d06b3f1b6644a06385bb91723f15669f6d21b0a99dd6a95495","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e26e0c1f6843b9d06b3f1b6644a06385bb91723f15669f6d21b0a99dd6a95495"}
{"level":"debug","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e26e0c1f6843b9d06b3f1b6644a06385bb91723f15669f6d21b0a99dd6a95495","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:26:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:26:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e26e0c1f6843b9d06b3f1b6644a06385bb91723f15669f6d21b0a99dd6a95495"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e26e0c1f6843b9d06b3f1b6644a06385bb91723f15669f6d21b0a99dd6a95495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e26e0c1f6843b9d06b3f1b6644a06385bb91723f15669f6d21b0a99dd6a95495","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e26e0c1f6843b9d06b3f1b6644a06385bb91723f15669f6d21b0a99dd6a95495"}
{"level":"debug","ts":"2026-07-02T20:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bece425b339ab0f8095a1510dce16d264b3005def2a047611c55df5a814e1ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:26:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:26:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bece425b339ab0f8095a1510dce16d264b3005def2a047611c55df5a814e1ed"}
{"level":"info","ts":"2026-07-02T20:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bece425b339ab0f8095a1510dce16d264b3005def2a047611c55df5a814e1ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c67967a0e8cce9cbdd080246b5d4a3b64cdf5c496fb933968043701809967","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:26:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:26:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c67967a0e8cce9cbdd080246b5d4a3b64cdf5c496fb933968043701809967","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bece425b339ab0f8095a1510dce16d264b3005def2a047611c55df5a814e1ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:26:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:26:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bece425b339ab0f8095a1510dce16d264b3005def2a047611c55df5a814e1ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bece425b339ab0f8095a1510dce16d264b3005def2a047611c55df5a814e1ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9c67967a0e8cce9cbdd080246b5d4a3b64cdf5c496fb933968043701809967","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bece425b339ab0f8095a1510dce16d264b3005def2a047611c55df5a814e1ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9c67967a0e8cce9cbdd080246b5d4a3b64cdf5c496fb933968043701809967"}
{"level":"debug","ts":"2026-07-02T20:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c67967a0e8cce9cbdd080246b5d4a3b64cdf5c496fb933968043701809967","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:26:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:26:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9c67967a0e8cce9cbdd080246b5d4a3b64cdf5c496fb933968043701809967"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c67967a0e8cce9cbdd080246b5d4a3b64cdf5c496fb933968043701809967","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9c67967a0e8cce9cbdd080246b5d4a3b64cdf5c496fb933968043701809967","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bece425b339ab0f8095a1510dce16d264b3005def2a047611c55df5a814e1ed"}
{"level":"info","ts":"2026-07-02T20:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9c67967a0e8cce9cbdd080246b5d4a3b64cdf5c496fb933968043701809967"}
{"level":"info","ts":"2026-07-02T20:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e26e0c1f6843b9d06b3f1b6644a06385bb91723f15669f6d21b0a99dd6a95495"}
{"level":"info","ts":"2026-07-02T20:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d48fba0694259bcd83864e61c13f282776a19f37f2733d61bd281ed2b2cb32fc"}
{"level":"info","ts":"2026-07-02T20:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a9c67967a0e8cce9cbdd080246b5d4a3b64cdf5c496fb933968043701809967"}
{"level":"info","ts":"2026-07-02T20:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bece425b339ab0f8095a1510dce16d264b3005def2a047611c55df5a814e1ed"}
{"level":"debug","ts":"2026-07-02T20:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60aa6d7ab055a1e10600bfc169692adf1f3ee79c47f7ea8cb4984f207f9bc39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60aa6d7ab055a1e10600bfc169692adf1f3ee79c47f7ea8cb4984f207f9bc39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60aa6d7ab055a1e10600bfc169692adf1f3ee79c47f7ea8cb4984f207f9bc39d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60aa6d7ab055a1e10600bfc169692adf1f3ee79c47f7ea8cb4984f207f9bc39d"}
{"level":"debug","ts":"2026-07-02T20:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60aa6d7ab055a1e10600bfc169692adf1f3ee79c47f7ea8cb4984f207f9bc39d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60aa6d7ab055a1e10600bfc169692adf1f3ee79c47f7ea8cb4984f207f9bc39d"}
{"level":"debug","ts":"2026-07-02T20:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60aa6d7ab055a1e10600bfc169692adf1f3ee79c47f7ea8cb4984f207f9bc39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60aa6d7ab055a1e10600bfc169692adf1f3ee79c47f7ea8cb4984f207f9bc39d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60aa6d7ab055a1e10600bfc169692adf1f3ee79c47f7ea8cb4984f207f9bc39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60aa6d7ab055a1e10600bfc169692adf1f3ee79c47f7ea8cb4984f207f9bc39d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60aa6d7ab055a1e10600bfc169692adf1f3ee79c47f7ea8cb4984f207f9bc39d"}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb"}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb"}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb"}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb"}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb"}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb"}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb"}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8"}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8"}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8"}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8"}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8"}
{"level":"error","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"}
{"level":"error","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27745309c7960b6a5bb8577dde3d452567129e92a3a083bdf171b41a9cde5de8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27745309c7960b6a5bb8577dde3d452567129e92a3a083bdf171b41a9cde5de8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27745309c7960b6a5bb8577dde3d452567129e92a3a083bdf171b41a9cde5de8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a364ff6a9a1fd2222034bd0ab0b13b96b7f3b3c0f943d1815841be4c0cc08b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27745309c7960b6a5bb8577dde3d452567129e92a3a083bdf171b41a9cde5de8"}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a364ff6a9a1fd2222034bd0ab0b13b96b7f3b3c0f943d1815841be4c0cc08b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27745309c7960b6a5bb8577dde3d452567129e92a3a083bdf171b41a9cde5de8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27745309c7960b6a5bb8577dde3d452567129e92a3a083bdf171b41a9cde5de8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27745309c7960b6a5bb8577dde3d452567129e92a3a083bdf171b41a9cde5de8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a364ff6a9a1fd2222034bd0ab0b13b96b7f3b3c0f943d1815841be4c0cc08b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a364ff6a9a1fd2222034bd0ab0b13b96b7f3b3c0f943d1815841be4c0cc08b1a"}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a364ff6a9a1fd2222034bd0ab0b13b96b7f3b3c0f943d1815841be4c0cc08b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27745309c7960b6a5bb8577dde3d452567129e92a3a083bdf171b41a9cde5de8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a364ff6a9a1fd2222034bd0ab0b13b96b7f3b3c0f943d1815841be4c0cc08b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a364ff6a9a1fd2222034bd0ab0b13b96b7f3b3c0f943d1815841be4c0cc08b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a364ff6a9a1fd2222034bd0ab0b13b96b7f3b3c0f943d1815841be4c0cc08b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b71144b25135fae308c43e76d8bbcba71948f368e6705fe7241f1408177ff6ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b71144b25135fae308c43e76d8bbcba71948f368e6705fe7241f1408177ff6ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a364ff6a9a1fd2222034bd0ab0b13b96b7f3b3c0f943d1815841be4c0cc08b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b71144b25135fae308c43e76d8bbcba71948f368e6705fe7241f1408177ff6ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27745309c7960b6a5bb8577dde3d452567129e92a3a083bdf171b41a9cde5de8"}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b71144b25135fae308c43e76d8bbcba71948f368e6705fe7241f1408177ff6ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b71144b25135fae308c43e76d8bbcba71948f368e6705fe7241f1408177ff6ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a364ff6a9a1fd2222034bd0ab0b13b96b7f3b3c0f943d1815841be4c0cc08b1a"}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b71144b25135fae308c43e76d8bbcba71948f368e6705fe7241f1408177ff6ae"}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b71144b25135fae308c43e76d8bbcba71948f368e6705fe7241f1408177ff6ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b71144b25135fae308c43e76d8bbcba71948f368e6705fe7241f1408177ff6ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b71144b25135fae308c43e76d8bbcba71948f368e6705fe7241f1408177ff6ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b71144b25135fae308c43e76d8bbcba71948f368e6705fe7241f1408177ff6ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b71144b25135fae308c43e76d8bbcba71948f368e6705fe7241f1408177ff6ae"}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97add3460010c7a84ad206d3c0c410c20ff7de7114284e124e6f946184e5753d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97add3460010c7a84ad206d3c0c410c20ff7de7114284e124e6f946184e5753d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97add3460010c7a84ad206d3c0c410c20ff7de7114284e124e6f946184e5753d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97add3460010c7a84ad206d3c0c410c20ff7de7114284e124e6f946184e5753d"}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97add3460010c7a84ad206d3c0c410c20ff7de7114284e124e6f946184e5753d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef33a5f048b911652243ea83b8f03f813f727109db6ef9a28341fe4d36e8fb20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef33a5f048b911652243ea83b8f03f813f727109db6ef9a28341fe4d36e8fb20"}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef33a5f048b911652243ea83b8f03f813f727109db6ef9a28341fe4d36e8fb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97add3460010c7a84ad206d3c0c410c20ff7de7114284e124e6f946184e5753d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef33a5f048b911652243ea83b8f03f813f727109db6ef9a28341fe4d36e8fb20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef33a5f048b911652243ea83b8f03f813f727109db6ef9a28341fe4d36e8fb20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef33a5f048b911652243ea83b8f03f813f727109db6ef9a28341fe4d36e8fb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef33a5f048b911652243ea83b8f03f813f727109db6ef9a28341fe4d36e8fb20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef33a5f048b911652243ea83b8f03f813f727109db6ef9a28341fe4d36e8fb20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97add3460010c7a84ad206d3c0c410c20ff7de7114284e124e6f946184e5753d"}
{"level":"error","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef33a5f048b911652243ea83b8f03f813f727109db6ef9a28341fe4d36e8fb20","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef33a5f048b911652243ea83b8f03f813f727109db6ef9a28341fe4d36e8fb20\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97add3460010c7a84ad206d3c0c410c20ff7de7114284e124e6f946184e5753d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97add3460010c7a84ad206d3c0c410c20ff7de7114284e124e6f946184e5753d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef33a5f048b911652243ea83b8f03f813f727109db6ef9a28341fe4d36e8fb20"}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97add3460010c7a84ad206d3c0c410c20ff7de7114284e124e6f946184e5753d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef33a5f048b911652243ea83b8f03f813f727109db6ef9a28341fe4d36e8fb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97add3460010c7a84ad206d3c0c410c20ff7de7114284e124e6f946184e5753d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97add3460010c7a84ad206d3c0c410c20ff7de7114284e124e6f946184e5753d"}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"}
{"level":"debug","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002"}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002"}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002"}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4"}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4"}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37ad920bbb9e926c31beed9ad5075bdb8b2fdaa7a9d6e5a04d1974f4bf291f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37ad920bbb9e926c31beed9ad5075bdb8b2fdaa7a9d6e5a04d1974f4bf291f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e37ad920bbb9e926c31beed9ad5075bdb8b2fdaa7a9d6e5a04d1974f4bf291f"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e37ad920bbb9e926c31beed9ad5075bdb8b2fdaa7a9d6e5a04d1974f4bf291f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e37ad920bbb9e926c31beed9ad5075bdb8b2fdaa7a9d6e5a04d1974f4bf291f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e37ad920bbb9e926c31beed9ad5075bdb8b2fdaa7a9d6e5a04d1974f4bf291f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e37ad920bbb9e926c31beed9ad5075bdb8b2fdaa7a9d6e5a04d1974f4bf291f"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e37ad920bbb9e926c31beed9ad5075bdb8b2fdaa7a9d6e5a04d1974f4bf291f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4"}
{"level":"error","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0"}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e37ad920bbb9e926c31beed9ad5075bdb8b2fdaa7a9d6e5a04d1974f4bf291f"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68"}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127"}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4622a6e0e2772b50cd5778dae1063a03042db6506f5983431c6b3d5a2b029dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4622a6e0e2772b50cd5778dae1063a03042db6506f5983431c6b3d5a2b029dc8"}
{"level":"info","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4622a6e0e2772b50cd5778dae1063a03042db6506f5983431c6b3d5a2b029dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127"}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4622a6e0e2772b50cd5778dae1063a03042db6506f5983431c6b3d5a2b029dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4622a6e0e2772b50cd5778dae1063a03042db6506f5983431c6b3d5a2b029dc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158"}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4622a6e0e2772b50cd5778dae1063a03042db6506f5983431c6b3d5a2b029dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4622a6e0e2772b50cd5778dae1063a03042db6506f5983431c6b3d5a2b029dc8"}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127"}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4622a6e0e2772b50cd5778dae1063a03042db6506f5983431c6b3d5a2b029dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:28:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:28:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158"}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4622a6e0e2772b50cd5778dae1063a03042db6506f5983431c6b3d5a2b029dc8"}
{"level":"error","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127"}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158"}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11323bb6-e62e-4402-80ea-6cd7fb58bce7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59742","PortSpecifier":{"PortValue":59742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11323bb6-e62e-4402-80ea-6cd7fb58bce7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11323bb6-e62e-4402-80ea-6cd7fb58bce7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59742","PortSpecifier":{"PortValue":59742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024135,"nanos":654527062},"http":{"id":"11323bb6-e62e-4402-80ea-6cd7fb58bce7","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"11323bb6-e62e-4402-80ea-6cd7fb58bce7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11323bb6-e62e-4402-80ea-6cd7fb58bce7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11323bb6-e62e-4402-80ea-6cd7fb58bce7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11323bb6-e62e-4402-80ea-6cd7fb58bce7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11323bb6-e62e-4402-80ea-6cd7fb58bce7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11323bb6-e62e-4402-80ea-6cd7fb58bce7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/auth-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"11323bb6-e62e-4402-80ea-6cd7fb58bce7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11323bb6-e62e-4402-80ea-6cd7fb58bce7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11323bb6-e62e-4402-80ea-6cd7fb58bce7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11323bb6-e62e-4402-80ea-6cd7fb58bce7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11323bb6-e62e-4402-80ea-6cd7fb58bce7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75aa23f8-8627-4349-a132-f2e60ad729d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32774","PortSpecifier":{"PortValue":32774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75aa23f8-8627-4349-a132-f2e60ad729d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75aa23f8-8627-4349-a132-f2e60ad729d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32774","PortSpecifier":{"PortValue":32774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024135,"nanos":715997120},"http":{"id":"75aa23f8-8627-4349-a132-f2e60ad729d3","method":"POST","headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75aa23f8-8627-4349-a132-f2e60ad729d3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75aa23f8-8627-4349-a132-f2e60ad729d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75aa23f8-8627-4349-a132-f2e60ad729d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75aa23f8-8627-4349-a132-f2e60ad729d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75aa23f8-8627-4349-a132-f2e60ad729d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa5d1d/auth-test-model-fa5d1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75aa23f8-8627-4349-a132-f2e60ad729d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75aa23f8-8627-4349-a132-f2e60ad729d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75aa23f8-8627-4349-a132-f2e60ad729d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75aa23f8-8627-4349-a132-f2e60ad729d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75aa23f8-8627-4349-a132-f2e60ad729d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75aa23f8-8627-4349-a132-f2e60ad729d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97848e92-40ba-42fd-b493-dbd9f1055e8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59758","PortSpecifier":{"PortValue":59758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97848e92-40ba-42fd-b493-dbd9f1055e8e","method":"GET","path":"/maas-api/v1/api-keys/6915cf9c-72d9-4df9-9186-026f5c8edaea","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97848e92-40ba-42fd-b493-dbd9f1055e8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59758","PortSpecifier":{"PortValue":59758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024135,"nanos":805839189},"http":{"id":"97848e92-40ba-42fd-b493-dbd9f1055e8e","method":"GET","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6915cf9c-72d9-4df9-9186-026f5c8edaea",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"97848e92-40ba-42fd-b493-dbd9f1055e8e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97848e92-40ba-42fd-b493-dbd9f1055e8e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97848e92-40ba-42fd-b493-dbd9f1055e8e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6915cf9c-72d9-4df9-9186-026f5c8edaea",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97848e92-40ba-42fd-b493-dbd9f1055e8e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97848e92-40ba-42fd-b493-dbd9f1055e8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97848e92-40ba-42fd-b493-dbd9f1055e8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/auth-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"97848e92-40ba-42fd-b493-dbd9f1055e8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97848e92-40ba-42fd-b493-dbd9f1055e8e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97848e92-40ba-42fd-b493-dbd9f1055e8e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97848e92-40ba-42fd-b493-dbd9f1055e8e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97848e92-40ba-42fd-b493-dbd9f1055e8e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fb02d9c-b094-46eb-aeb9-93dbc3ecf6d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32788","PortSpecifier":{"PortValue":32788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4fb02d9c-b094-46eb-aeb9-93dbc3ecf6d7","method":"GET","path":"/maas-api/v1/api-keys/83823ac0-397f-44ba-b47e-3cf19867db2e","host":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fb02d9c-b094-46eb-aeb9-93dbc3ecf6d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32788","PortSpecifier":{"PortValue":32788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024135,"nanos":841814977},"http":{"id":"4fb02d9c-b094-46eb-aeb9-93dbc3ecf6d7","method":"GET","headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/83823ac0-397f-44ba-b47e-3cf19867db2e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4fb02d9c-b094-46eb-aeb9-93dbc3ecf6d7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4fb02d9c-b094-46eb-aeb9-93dbc3ecf6d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4fb02d9c-b094-46eb-aeb9-93dbc3ecf6d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/83823ac0-397f-44ba-b47e-3cf19867db2e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fb02d9c-b094-46eb-aeb9-93dbc3ecf6d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fb02d9c-b094-46eb-aeb9-93dbc3ecf6d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fb02d9c-b094-46eb-aeb9-93dbc3ecf6d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa5d1d/auth-test-model-fa5d1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4fb02d9c-b094-46eb-aeb9-93dbc3ecf6d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fb02d9c-b094-46eb-aeb9-93dbc3ecf6d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fb02d9c-b094-46eb-aeb9-93dbc3ecf6d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fb02d9c-b094-46eb-aeb9-93dbc3ecf6d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:28:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fb02d9c-b094-46eb-aeb9-93dbc3ecf6d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"121b8905-fbf1-413d-8e24-9050108142f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49296","PortSpecifier":{"PortValue":49296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"121b8905-fbf1-413d-8e24-9050108142f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"121b8905-fbf1-413d-8e24-9050108142f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49296","PortSpecifier":{"PortValue":49296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024153,"nanos":187547528},"http":{"id":"121b8905-fbf1-413d-8e24-9050108142f9","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"121b8905-fbf1-413d-8e24-9050108142f9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"121b8905-fbf1-413d-8e24-9050108142f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"121b8905-fbf1-413d-8e24-9050108142f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"121b8905-fbf1-413d-8e24-9050108142f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"121b8905-fbf1-413d-8e24-9050108142f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"121b8905-fbf1-413d-8e24-9050108142f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/auth-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"121b8905-fbf1-413d-8e24-9050108142f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"121b8905-fbf1-413d-8e24-9050108142f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"121b8905-fbf1-413d-8e24-9050108142f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"121b8905-fbf1-413d-8e24-9050108142f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"121b8905-fbf1-413d-8e24-9050108142f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50744060-7d52-4814-ab15-159466e59070","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57412","PortSpecifier":{"PortValue":57412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50744060-7d52-4814-ab15-159466e59070","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50744060-7d52-4814-ab15-159466e59070","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57412","PortSpecifier":{"PortValue":57412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024153,"nanos":230149549},"http":{"id":"50744060-7d52-4814-ab15-159466e59070","method":"POST","headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"50744060-7d52-4814-ab15-159466e59070","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50744060-7d52-4814-ab15-159466e59070","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50744060-7d52-4814-ab15-159466e59070","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50744060-7d52-4814-ab15-159466e59070","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50744060-7d52-4814-ab15-159466e59070","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50744060-7d52-4814-ab15-159466e59070","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa5d1d/auth-test-model-fa5d1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50744060-7d52-4814-ab15-159466e59070","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50744060-7d52-4814-ab15-159466e59070","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50744060-7d52-4814-ab15-159466e59070","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50744060-7d52-4814-ab15-159466e59070","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50744060-7d52-4814-ab15-159466e59070","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b78f220c-2d6d-4f9a-893a-9b670e43ab17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49312","PortSpecifier":{"PortValue":49312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b78f220c-2d6d-4f9a-893a-9b670e43ab17","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b78f220c-2d6d-4f9a-893a-9b670e43ab17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49312","PortSpecifier":{"PortValue":49312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024153,"nanos":278270570},"http":{"id":"b78f220c-2d6d-4f9a-893a-9b670e43ab17","method":"GET","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b78f220c-2d6d-4f9a-893a-9b670e43ab17","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sfFFW8E3m6e2Ljh3_TYfz9NkuPSrQjh2R591hOv9DM8xyfEHys6h5RR2xfsT"}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b78f220c-2d6d-4f9a-893a-9b670e43ab17","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sfFFW8E3m6e2Ljh3_TYfz9NkuPSrQjh2R591hOv9DM8xyfEHys6h5RR2xfsT\"}"}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b78f220c-2d6d-4f9a-893a-9b670e43ab17","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"90f4469a-9c31-48e7-90ed-d4ac544cdfca","keyName":"e2e-auth-iso-a-109268","subscription":"e2e-auth-iso-552a56","tenant":"e2e-shared-a-cd8cf5","userId":"90f4469a-9c31-48e7-90ed-d4ac544cdfca","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b78f220c-2d6d-4f9a-893a-9b670e43ab17","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b78f220c-2d6d-4f9a-893a-9b670e43ab17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b78f220c-2d6d-4f9a-893a-9b670e43ab17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b78f220c-2d6d-4f9a-893a-9b670e43ab17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/auth-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b78f220c-2d6d-4f9a-893a-9b670e43ab17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b78f220c-2d6d-4f9a-893a-9b670e43ab17","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b78f220c-2d6d-4f9a-893a-9b670e43ab17","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-552a56"}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b78f220c-2d6d-4f9a-893a-9b670e43ab17","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b78f220c-2d6d-4f9a-893a-9b670e43ab17","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:29:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b78f220c-2d6d-4f9a-893a-9b670e43ab17","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a6c90bc-8828-4f41-823c-e98fac319c86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52586","PortSpecifier":{"PortValue":52586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a6c90bc-8828-4f41-823c-e98fac319c86","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a6c90bc-8828-4f41-823c-e98fac319c86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52586","PortSpecifier":{"PortValue":52586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024168,"nanos":334682549},"http":{"id":"9a6c90bc-8828-4f41-823c-e98fac319c86","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a6c90bc-8828-4f41-823c-e98fac319c86","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a6c90bc-8828-4f41-823c-e98fac319c86","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a6c90bc-8828-4f41-823c-e98fac319c86","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a6c90bc-8828-4f41-823c-e98fac319c86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a6c90bc-8828-4f41-823c-e98fac319c86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a6c90bc-8828-4f41-823c-e98fac319c86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/auth-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a6c90bc-8828-4f41-823c-e98fac319c86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a6c90bc-8828-4f41-823c-e98fac319c86","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a6c90bc-8828-4f41-823c-e98fac319c86","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a6c90bc-8828-4f41-823c-e98fac319c86","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a6c90bc-8828-4f41-823c-e98fac319c86","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af6cb301-c0b4-41ad-96a6-f09008c9be61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44670","PortSpecifier":{"PortValue":44670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af6cb301-c0b4-41ad-96a6-f09008c9be61","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af6cb301-c0b4-41ad-96a6-f09008c9be61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44670","PortSpecifier":{"PortValue":44670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024168,"nanos":374267806},"http":{"id":"af6cb301-c0b4-41ad-96a6-f09008c9be61","method":"POST","headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af6cb301-c0b4-41ad-96a6-f09008c9be61","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af6cb301-c0b4-41ad-96a6-f09008c9be61","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af6cb301-c0b4-41ad-96a6-f09008c9be61","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af6cb301-c0b4-41ad-96a6-f09008c9be61","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af6cb301-c0b4-41ad-96a6-f09008c9be61","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af6cb301-c0b4-41ad-96a6-f09008c9be61","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa5d1d/auth-test-model-fa5d1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af6cb301-c0b4-41ad-96a6-f09008c9be61","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af6cb301-c0b4-41ad-96a6-f09008c9be61","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af6cb301-c0b4-41ad-96a6-f09008c9be61","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af6cb301-c0b4-41ad-96a6-f09008c9be61","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af6cb301-c0b4-41ad-96a6-f09008c9be61","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6f4c629-3053-414d-94b0-a7f536129f0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44672","PortSpecifier":{"PortValue":44672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6f4c629-3053-414d-94b0-a7f536129f0b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6f4c629-3053-414d-94b0-a7f536129f0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44672","PortSpecifier":{"PortValue":44672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024168,"nanos":416495057},"http":{"id":"c6f4c629-3053-414d-94b0-a7f536129f0b","method":"GET","headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6f4c629-3053-414d-94b0-a7f536129f0b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-V7iGmsMp9jbXreKK_EFYjTESFSIL0bnUjZsFZuwni3sB0qmTSELkweYPbYQ6"}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6f4c629-3053-414d-94b0-a7f536129f0b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fa5d1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-V7iGmsMp9jbXreKK_EFYjTESFSIL0bnUjZsFZuwni3sB0qmTSELkweYPbYQ6\"}"}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6f4c629-3053-414d-94b0-a7f536129f0b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fa5d1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6f4c629-3053-414d-94b0-a7f536129f0b","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6f4c629-3053-414d-94b0-a7f536129f0b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"c6f4c629-3053-414d-94b0-a7f536129f0b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6f4c629-3053-414d-94b0-a7f536129f0b","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-02T20:29:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6f4c629-3053-414d-94b0-a7f536129f0b","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a85edf7-76f2-42e8-85b5-61b359277bc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43740","PortSpecifier":{"PortValue":43740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a85edf7-76f2-42e8-85b5-61b359277bc0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a85edf7-76f2-42e8-85b5-61b359277bc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43740","PortSpecifier":{"PortValue":43740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024183,"nanos":496255400},"http":{"id":"1a85edf7-76f2-42e8-85b5-61b359277bc0","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1a85edf7-76f2-42e8-85b5-61b359277bc0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a85edf7-76f2-42e8-85b5-61b359277bc0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a85edf7-76f2-42e8-85b5-61b359277bc0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a85edf7-76f2-42e8-85b5-61b359277bc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a85edf7-76f2-42e8-85b5-61b359277bc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a85edf7-76f2-42e8-85b5-61b359277bc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/auth-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a85edf7-76f2-42e8-85b5-61b359277bc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a85edf7-76f2-42e8-85b5-61b359277bc0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a85edf7-76f2-42e8-85b5-61b359277bc0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a85edf7-76f2-42e8-85b5-61b359277bc0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a85edf7-76f2-42e8-85b5-61b359277bc0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47351679-4083-4316-ac18-f45960efc483","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35048","PortSpecifier":{"PortValue":35048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47351679-4083-4316-ac18-f45960efc483","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47351679-4083-4316-ac18-f45960efc483","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35048","PortSpecifier":{"PortValue":35048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024183,"nanos":537781336},"http":{"id":"47351679-4083-4316-ac18-f45960efc483","method":"POST","headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"47351679-4083-4316-ac18-f45960efc483","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47351679-4083-4316-ac18-f45960efc483","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47351679-4083-4316-ac18-f45960efc483","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47351679-4083-4316-ac18-f45960efc483","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47351679-4083-4316-ac18-f45960efc483","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47351679-4083-4316-ac18-f45960efc483","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa5d1d/auth-test-model-fa5d1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47351679-4083-4316-ac18-f45960efc483","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47351679-4083-4316-ac18-f45960efc483","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47351679-4083-4316-ac18-f45960efc483","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47351679-4083-4316-ac18-f45960efc483","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47351679-4083-4316-ac18-f45960efc483","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0e8f320-ce6a-456c-bdaf-49707d8bbaf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43746","PortSpecifier":{"PortValue":43746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0e8f320-ce6a-456c-bdaf-49707d8bbaf2","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0e8f320-ce6a-456c-bdaf-49707d8bbaf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43746","PortSpecifier":{"PortValue":43746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024183,"nanos":578593424},"http":{"id":"e0e8f320-ce6a-456c-bdaf-49707d8bbaf2","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e0e8f320-ce6a-456c-bdaf-49707d8bbaf2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0e8f320-ce6a-456c-bdaf-49707d8bbaf2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0e8f320-ce6a-456c-bdaf-49707d8bbaf2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0e8f320-ce6a-456c-bdaf-49707d8bbaf2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0e8f320-ce6a-456c-bdaf-49707d8bbaf2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0e8f320-ce6a-456c-bdaf-49707d8bbaf2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/auth-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e0e8f320-ce6a-456c-bdaf-49707d8bbaf2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0e8f320-ce6a-456c-bdaf-49707d8bbaf2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0e8f320-ce6a-456c-bdaf-49707d8bbaf2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0e8f320-ce6a-456c-bdaf-49707d8bbaf2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0e8f320-ce6a-456c-bdaf-49707d8bbaf2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56a58524-6054-4d99-81a6-6aa532d2d6c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35050","PortSpecifier":{"PortValue":35050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56a58524-6054-4d99-81a6-6aa532d2d6c6","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56a58524-6054-4d99-81a6-6aa532d2d6c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35050","PortSpecifier":{"PortValue":35050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024183,"nanos":628214870},"http":{"id":"56a58524-6054-4d99-81a6-6aa532d2d6c6","method":"POST","headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"56a58524-6054-4d99-81a6-6aa532d2d6c6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56a58524-6054-4d99-81a6-6aa532d2d6c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56a58524-6054-4d99-81a6-6aa532d2d6c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56a58524-6054-4d99-81a6-6aa532d2d6c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56a58524-6054-4d99-81a6-6aa532d2d6c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56a58524-6054-4d99-81a6-6aa532d2d6c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa5d1d/auth-test-model-fa5d1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"56a58524-6054-4d99-81a6-6aa532d2d6c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56a58524-6054-4d99-81a6-6aa532d2d6c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56a58524-6054-4d99-81a6-6aa532d2d6c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56a58524-6054-4d99-81a6-6aa532d2d6c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:29:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56a58524-6054-4d99-81a6-6aa532d2d6c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69f28450-bdc8-4d10-b140-5a07ffff39c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47706","PortSpecifier":{"PortValue":47706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69f28450-bdc8-4d10-b140-5a07ffff39c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69f28450-bdc8-4d10-b140-5a07ffff39c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47706","PortSpecifier":{"PortValue":47706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024206,"nanos":59986847},"http":{"id":"69f28450-bdc8-4d10-b140-5a07ffff39c8","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69f28450-bdc8-4d10-b140-5a07ffff39c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69f28450-bdc8-4d10-b140-5a07ffff39c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69f28450-bdc8-4d10-b140-5a07ffff39c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69f28450-bdc8-4d10-b140-5a07ffff39c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69f28450-bdc8-4d10-b140-5a07ffff39c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69f28450-bdc8-4d10-b140-5a07ffff39c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/auth-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69f28450-bdc8-4d10-b140-5a07ffff39c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69f28450-bdc8-4d10-b140-5a07ffff39c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69f28450-bdc8-4d10-b140-5a07ffff39c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69f28450-bdc8-4d10-b140-5a07ffff39c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69f28450-bdc8-4d10-b140-5a07ffff39c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca3351b7-7de4-497a-a54b-801bb8f57c34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53366","PortSpecifier":{"PortValue":53366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca3351b7-7de4-497a-a54b-801bb8f57c34","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca3351b7-7de4-497a-a54b-801bb8f57c34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53366","PortSpecifier":{"PortValue":53366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024206,"nanos":95892705},"http":{"id":"ca3351b7-7de4-497a-a54b-801bb8f57c34","method":"POST","headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ca3351b7-7de4-497a-a54b-801bb8f57c34","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca3351b7-7de4-497a-a54b-801bb8f57c34","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca3351b7-7de4-497a-a54b-801bb8f57c34","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca3351b7-7de4-497a-a54b-801bb8f57c34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca3351b7-7de4-497a-a54b-801bb8f57c34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca3351b7-7de4-497a-a54b-801bb8f57c34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa5d1d/auth-test-model-fa5d1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca3351b7-7de4-497a-a54b-801bb8f57c34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca3351b7-7de4-497a-a54b-801bb8f57c34","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca3351b7-7de4-497a-a54b-801bb8f57c34","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca3351b7-7de4-497a-a54b-801bb8f57c34","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca3351b7-7de4-497a-a54b-801bb8f57c34","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9f2fe9a-43cc-462c-9886-ff3f977cbce8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53370","PortSpecifier":{"PortValue":53370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9f2fe9a-43cc-462c-9886-ff3f977cbce8","method":"GET","path":"/maas-api/v1/api-keys/c857e7cf-046d-45a6-9299-16082f613a03","host":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9f2fe9a-43cc-462c-9886-ff3f977cbce8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53370","PortSpecifier":{"PortValue":53370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024206,"nanos":137572414},"http":{"id":"a9f2fe9a-43cc-462c-9886-ff3f977cbce8","method":"GET","headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c857e7cf-046d-45a6-9299-16082f613a03",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a9f2fe9a-43cc-462c-9886-ff3f977cbce8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9f2fe9a-43cc-462c-9886-ff3f977cbce8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9f2fe9a-43cc-462c-9886-ff3f977cbce8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c857e7cf-046d-45a6-9299-16082f613a03",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9f2fe9a-43cc-462c-9886-ff3f977cbce8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9f2fe9a-43cc-462c-9886-ff3f977cbce8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9f2fe9a-43cc-462c-9886-ff3f977cbce8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa5d1d/auth-test-model-fa5d1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a9f2fe9a-43cc-462c-9886-ff3f977cbce8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9f2fe9a-43cc-462c-9886-ff3f977cbce8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9f2fe9a-43cc-462c-9886-ff3f977cbce8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9f2fe9a-43cc-462c-9886-ff3f977cbce8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9f2fe9a-43cc-462c-9886-ff3f977cbce8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"666a9e5e-3eb1-4e80-87db-9ef621309959","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47714","PortSpecifier":{"PortValue":47714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"666a9e5e-3eb1-4e80-87db-9ef621309959","method":"GET","path":"/maas-api/v1/api-keys/c857e7cf-046d-45a6-9299-16082f613a03","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"666a9e5e-3eb1-4e80-87db-9ef621309959","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47714","PortSpecifier":{"PortValue":47714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024206,"nanos":177124800},"http":{"id":"666a9e5e-3eb1-4e80-87db-9ef621309959","method":"GET","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c857e7cf-046d-45a6-9299-16082f613a03",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"666a9e5e-3eb1-4e80-87db-9ef621309959","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"666a9e5e-3eb1-4e80-87db-9ef621309959","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"666a9e5e-3eb1-4e80-87db-9ef621309959","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c857e7cf-046d-45a6-9299-16082f613a03",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"666a9e5e-3eb1-4e80-87db-9ef621309959","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"666a9e5e-3eb1-4e80-87db-9ef621309959","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"666a9e5e-3eb1-4e80-87db-9ef621309959","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/auth-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"666a9e5e-3eb1-4e80-87db-9ef621309959","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"666a9e5e-3eb1-4e80-87db-9ef621309959","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"666a9e5e-3eb1-4e80-87db-9ef621309959","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"666a9e5e-3eb1-4e80-87db-9ef621309959","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:30:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"666a9e5e-3eb1-4e80-87db-9ef621309959","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1aa98aa-9c4b-4b1e-aedd-b3ea73499b9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38304","PortSpecifier":{"PortValue":38304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1aa98aa-9c4b-4b1e-aedd-b3ea73499b9a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1aa98aa-9c4b-4b1e-aedd-b3ea73499b9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38304","PortSpecifier":{"PortValue":38304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024221,"nanos":314178027},"http":{"id":"f1aa98aa-9c4b-4b1e-aedd-b3ea73499b9a","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f1aa98aa-9c4b-4b1e-aedd-b3ea73499b9a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1aa98aa-9c4b-4b1e-aedd-b3ea73499b9a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1aa98aa-9c4b-4b1e-aedd-b3ea73499b9a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1aa98aa-9c4b-4b1e-aedd-b3ea73499b9a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1aa98aa-9c4b-4b1e-aedd-b3ea73499b9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1aa98aa-9c4b-4b1e-aedd-b3ea73499b9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/auth-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f1aa98aa-9c4b-4b1e-aedd-b3ea73499b9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1aa98aa-9c4b-4b1e-aedd-b3ea73499b9a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1aa98aa-9c4b-4b1e-aedd-b3ea73499b9a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1aa98aa-9c4b-4b1e-aedd-b3ea73499b9a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1aa98aa-9c4b-4b1e-aedd-b3ea73499b9a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7bcd325-cd25-4e3b-9aed-912e3cacfa7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53702","PortSpecifier":{"PortValue":53702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7bcd325-cd25-4e3b-9aed-912e3cacfa7f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7bcd325-cd25-4e3b-9aed-912e3cacfa7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53702","PortSpecifier":{"PortValue":53702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024221,"nanos":356204830},"http":{"id":"e7bcd325-cd25-4e3b-9aed-912e3cacfa7f","method":"POST","headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e7bcd325-cd25-4e3b-9aed-912e3cacfa7f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7bcd325-cd25-4e3b-9aed-912e3cacfa7f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7bcd325-cd25-4e3b-9aed-912e3cacfa7f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7bcd325-cd25-4e3b-9aed-912e3cacfa7f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7bcd325-cd25-4e3b-9aed-912e3cacfa7f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7bcd325-cd25-4e3b-9aed-912e3cacfa7f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa5d1d/auth-test-model-fa5d1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7bcd325-cd25-4e3b-9aed-912e3cacfa7f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7bcd325-cd25-4e3b-9aed-912e3cacfa7f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7bcd325-cd25-4e3b-9aed-912e3cacfa7f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7bcd325-cd25-4e3b-9aed-912e3cacfa7f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7bcd325-cd25-4e3b-9aed-912e3cacfa7f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c5b7bfb-e9ae-44c0-8963-e03727daad42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38316","PortSpecifier":{"PortValue":38316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c5b7bfb-e9ae-44c0-8963-e03727daad42","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c5b7bfb-e9ae-44c0-8963-e03727daad42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38316","PortSpecifier":{"PortValue":38316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024221,"nanos":396084013},"http":{"id":"8c5b7bfb-e9ae-44c0-8963-e03727daad42","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c5b7bfb-e9ae-44c0-8963-e03727daad42","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-n3OZQG2VcUdEKq9P_5hOnZLicO9nQ0B23TmYuSqeJiOhPcanVe8PZCbHXwyw"}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c5b7bfb-e9ae-44c0-8963-e03727daad42","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-n3OZQG2VcUdEKq9P_5hOnZLicO9nQ0B23TmYuSqeJiOhPcanVe8PZCbHXwyw\"}"}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c5b7bfb-e9ae-44c0-8963-e03727daad42","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dbca54b9-b913-46d9-8f15-480a3bf1a2dc","keyName":"e2e-auth-iso-a-bd511b","subscription":"e2e-auth-iso-5c76ee","tenant":"e2e-shared-a-cd8cf5","userId":"dbca54b9-b913-46d9-8f15-480a3bf1a2dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c5b7bfb-e9ae-44c0-8963-e03727daad42","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c5b7bfb-e9ae-44c0-8963-e03727daad42","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c5b7bfb-e9ae-44c0-8963-e03727daad42","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c5b7bfb-e9ae-44c0-8963-e03727daad42","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/auth-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c5b7bfb-e9ae-44c0-8963-e03727daad42","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-5c76ee"}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c5b7bfb-e9ae-44c0-8963-e03727daad42","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c5b7bfb-e9ae-44c0-8963-e03727daad42","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c5b7bfb-e9ae-44c0-8963-e03727daad42","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c5b7bfb-e9ae-44c0-8963-e03727daad42","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:30:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c5b7bfb-e9ae-44c0-8963-e03727daad42","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60aa6d7ab055a1e10600bfc169692adf1f3ee79c47f7ea8cb4984f207f9bc39d"}
{"level":"info","ts":"2026-07-02T20:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e37ad920bbb9e926c31beed9ad5075bdb8b2fdaa7a9d6e5a04d1974f4bf291f"}
{"level":"info","ts":"2026-07-02T20:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/708d90506658b0cd3288c9f5d1ab7bf4a652f88ccf5ae9c920e8052fa5f1dcc7"}
{"level":"info","ts":"2026-07-02T20:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b71144b25135fae308c43e76d8bbcba71948f368e6705fe7241f1408177ff6ae"}
{"level":"info","ts":"2026-07-02T20:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b62f7dcf4fd3c43ed2043dae04fa215dfb088cad29262bc828a6c3f77fac1dfb"}
{"level":"info","ts":"2026-07-02T20:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ba5eba66df61661e94bcc080efb9b8448b332a485e3fdedfe84a68fec16aad8"}
{"level":"info","ts":"2026-07-02T20:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97add3460010c7a84ad206d3c0c410c20ff7de7114284e124e6f946184e5753d"}
{"level":"info","ts":"2026-07-02T20:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95d71d1ca6c72193b27890c1d0ce656d2b6a0f7ab8cb9f4fceb95866dbf74c68"}
{"level":"info","ts":"2026-07-02T20:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a364ff6a9a1fd2222034bd0ab0b13b96b7f3b3c0f943d1815841be4c0cc08b1a"}
{"level":"info","ts":"2026-07-02T20:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef33a5f048b911652243ea83b8f03f813f727109db6ef9a28341fe4d36e8fb20"}
{"level":"info","ts":"2026-07-02T20:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05b895d3995ad419f8e1cec20d9f21aae7cc13deea94a33a7a00f753d0615158"}
{"level":"info","ts":"2026-07-02T20:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac5d287f69d53cab21d294f1a84ef13594dedeee6e64fff3596efdc1bf12b2d4"}
{"level":"info","ts":"2026-07-02T20:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4622a6e0e2772b50cd5778dae1063a03042db6506f5983431c6b3d5a2b029dc8"}
{"level":"info","ts":"2026-07-02T20:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1bd503d2a4a763cd5c4d45204520c6a780273891018ad92ca51579458bc9002"}
{"level":"info","ts":"2026-07-02T20:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa31e96a8810b6c5291ccf9443c4eaa9ca4ffacde309d0d82832fb8bdd026de0"}
{"level":"info","ts":"2026-07-02T20:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27745309c7960b6a5bb8577dde3d452567129e92a3a083bdf171b41a9cde5de8"}
{"level":"debug","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"}
{"level":"debug","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"}
{"level":"debug","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"}
{"level":"debug","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"}
{"level":"debug","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd"}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd"}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd"}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd"}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd"}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd"}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2"}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2"}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2"}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd"}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f61af9fe83f700000d1304f4bf53949ed71540b8f7322d16771fb23b0a17cdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f61af9fe83f700000d1304f4bf53949ed71540b8f7322d16771fb23b0a17cdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f61af9fe83f700000d1304f4bf53949ed71540b8f7322d16771fb23b0a17cdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f61af9fe83f700000d1304f4bf53949ed71540b8f7322d16771fb23b0a17cdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f61af9fe83f700000d1304f4bf53949ed71540b8f7322d16771fb23b0a17cdd"}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f61af9fe83f700000d1304f4bf53949ed71540b8f7322d16771fb23b0a17cdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f61af9fe83f700000d1304f4bf53949ed71540b8f7322d16771fb23b0a17cdd"}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2"}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f61af9fe83f700000d1304f4bf53949ed71540b8f7322d16771fb23b0a17cdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f61af9fe83f700000d1304f4bf53949ed71540b8f7322d16771fb23b0a17cdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f61af9fe83f700000d1304f4bf53949ed71540b8f7322d16771fb23b0a17cdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f61af9fe83f700000d1304f4bf53949ed71540b8f7322d16771fb23b0a17cdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d"}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f61af9fe83f700000d1304f4bf53949ed71540b8f7322d16771fb23b0a17cdd"}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d"}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69"}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961"}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69"}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961"}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69"}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961"}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b"}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69"}
{"level":"debug","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961"}
{"level":"info","ts":"2026-07-02T20:30:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b"}
{"level":"debug","ts":"2026-07-02T20:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00da846ac7910f176af1b28600d501b56db11480de7217c35a1ac1a73e6b7722","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00da846ac7910f176af1b28600d501b56db11480de7217c35a1ac1a73e6b7722","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00da846ac7910f176af1b28600d501b56db11480de7217c35a1ac1a73e6b7722","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00da846ac7910f176af1b28600d501b56db11480de7217c35a1ac1a73e6b7722","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00da846ac7910f176af1b28600d501b56db11480de7217c35a1ac1a73e6b7722"}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00da846ac7910f176af1b28600d501b56db11480de7217c35a1ac1a73e6b7722","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00da846ac7910f176af1b28600d501b56db11480de7217c35a1ac1a73e6b7722"}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00da846ac7910f176af1b28600d501b56db11480de7217c35a1ac1a73e6b7722","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00da846ac7910f176af1b28600d501b56db11480de7217c35a1ac1a73e6b7722"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00da846ac7910f176af1b28600d501b56db11480de7217c35a1ac1a73e6b7722","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00da846ac7910f176af1b28600d501b56db11480de7217c35a1ac1a73e6b7722","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00da846ac7910f176af1b28600d501b56db11480de7217c35a1ac1a73e6b7722"}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a4c05867f723508f07f7390f222fe1085b81dfded32d585b9bbf5042c01d06a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a4c05867f723508f07f7390f222fe1085b81dfded32d585b9bbf5042c01d06a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a4c05867f723508f07f7390f222fe1085b81dfded32d585b9bbf5042c01d06a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a4c05867f723508f07f7390f222fe1085b81dfded32d585b9bbf5042c01d06a"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a4c05867f723508f07f7390f222fe1085b81dfded32d585b9bbf5042c01d06a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a4c05867f723508f07f7390f222fe1085b81dfded32d585b9bbf5042c01d06a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a4c05867f723508f07f7390f222fe1085b81dfded32d585b9bbf5042c01d06a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a4c05867f723508f07f7390f222fe1085b81dfded32d585b9bbf5042c01d06a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a4c05867f723508f07f7390f222fe1085b81dfded32d585b9bbf5042c01d06a"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c778ac0e0910dcfe3e081d4e58d6585bfbcf513a191d886878708bfb94beab5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c778ac0e0910dcfe3e081d4e58d6585bfbcf513a191d886878708bfb94beab5"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c778ac0e0910dcfe3e081d4e58d6585bfbcf513a191d886878708bfb94beab5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c778ac0e0910dcfe3e081d4e58d6585bfbcf513a191d886878708bfb94beab5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c778ac0e0910dcfe3e081d4e58d6585bfbcf513a191d886878708bfb94beab5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c778ac0e0910dcfe3e081d4e58d6585bfbcf513a191d886878708bfb94beab5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c778ac0e0910dcfe3e081d4e58d6585bfbcf513a191d886878708bfb94beab5"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c778ac0e0910dcfe3e081d4e58d6585bfbcf513a191d886878708bfb94beab5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c778ac0e0910dcfe3e081d4e58d6585bfbcf513a191d886878708bfb94beab5"}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0"}
{"level":"info","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T20:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0"}
{"level":"info","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0"}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0"}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0"}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0"}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0"}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0"}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0"}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0"}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f61af9fe83f700000d1304f4bf53949ed71540b8f7322d16771fb23b0a17cdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f61af9fe83f700000d1304f4bf53949ed71540b8f7322d16771fb23b0a17cdd"}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d"}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d"}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d"}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2"}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d"}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d"}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d"}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b"}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b"}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d"}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b"}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47"}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0"}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961"}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213"}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a4c05867f723508f07f7390f222fe1085b81dfded32d585b9bbf5042c01d06a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463"}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213"}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a4c05867f723508f07f7390f222fe1085b81dfded32d585b9bbf5042c01d06a"}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:31:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00da846ac7910f176af1b28600d501b56db11480de7217c35a1ac1a73e6b7722","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"}
{"level":"debug","ts":"2026-07-02T20:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213"}
{"level":"debug","ts":"2026-07-02T20:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c778ac0e0910dcfe3e081d4e58d6585bfbcf513a191d886878708bfb94beab5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"}
{"level":"info","ts":"2026-07-02T20:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00da846ac7910f176af1b28600d501b56db11480de7217c35a1ac1a73e6b7722"}
{"level":"debug","ts":"2026-07-02T20:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd"}
{"level":"debug","ts":"2026-07-02T20:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c778ac0e0910dcfe3e081d4e58d6585bfbcf513a191d886878708bfb94beab5"}
{"level":"info","ts":"2026-07-02T20:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69"}
{"level":"info","ts":"2026-07-02T20:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"}
{"level":"info","ts":"2026-07-02T20:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127"}
{"level":"info","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79d5933e-f502-4add-a124-c2586bb50331","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56344","PortSpecifier":{"PortValue":56344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79d5933e-f502-4add-a124-c2586bb50331","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79d5933e-f502-4add-a124-c2586bb50331","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56344","PortSpecifier":{"PortValue":56344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024292,"nanos":253694194},"http":{"id":"79d5933e-f502-4add-a124-c2586bb50331","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"79d5933e-f502-4add-a124-c2586bb50331","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79d5933e-f502-4add-a124-c2586bb50331","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79d5933e-f502-4add-a124-c2586bb50331","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79d5933e-f502-4add-a124-c2586bb50331","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79d5933e-f502-4add-a124-c2586bb50331","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79d5933e-f502-4add-a124-c2586bb50331","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/sub-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79d5933e-f502-4add-a124-c2586bb50331","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79d5933e-f502-4add-a124-c2586bb50331","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79d5933e-f502-4add-a124-c2586bb50331","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79d5933e-f502-4add-a124-c2586bb50331","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79d5933e-f502-4add-a124-c2586bb50331","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2d6d3b9-a160-42ff-9710-f71f507c004a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36948","PortSpecifier":{"PortValue":36948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2d6d3b9-a160-42ff-9710-f71f507c004a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2d6d3b9-a160-42ff-9710-f71f507c004a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36948","PortSpecifier":{"PortValue":36948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024292,"nanos":296378280},"http":{"id":"d2d6d3b9-a160-42ff-9710-f71f507c004a","method":"POST","headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d2d6d3b9-a160-42ff-9710-f71f507c004a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2d6d3b9-a160-42ff-9710-f71f507c004a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2d6d3b9-a160-42ff-9710-f71f507c004a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d6d3b9-a160-42ff-9710-f71f507c004a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d6d3b9-a160-42ff-9710-f71f507c004a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d6d3b9-a160-42ff-9710-f71f507c004a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa5d1d/sub-test-model-fa5d1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d2d6d3b9-a160-42ff-9710-f71f507c004a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2d6d3b9-a160-42ff-9710-f71f507c004a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2d6d3b9-a160-42ff-9710-f71f507c004a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2d6d3b9-a160-42ff-9710-f71f507c004a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2d6d3b9-a160-42ff-9710-f71f507c004a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c151904-6bb5-4dd7-aac5-5ec22db7dbe1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56360","PortSpecifier":{"PortValue":56360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c151904-6bb5-4dd7-aac5-5ec22db7dbe1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c151904-6bb5-4dd7-aac5-5ec22db7dbe1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56360","PortSpecifier":{"PortValue":56360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024292,"nanos":336875572},"http":{"id":"5c151904-6bb5-4dd7-aac5-5ec22db7dbe1","method":"GET","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c151904-6bb5-4dd7-aac5-5ec22db7dbe1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Lir471LgcVrC0j7P_hhHOHnS4wrw4Yd25GdMCd9xRxUbFH0AuxtjBCV8GDRh"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c151904-6bb5-4dd7-aac5-5ec22db7dbe1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Lir471LgcVrC0j7P_hhHOHnS4wrw4Yd25GdMCd9xRxUbFH0AuxtjBCV8GDRh\"}"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c151904-6bb5-4dd7-aac5-5ec22db7dbe1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9af01b9b-d229-4cd0-9f7a-707519784bbf","keyName":"e2e-sub-iso-6fd5a0","subscription":"e2e-a-only-73106c","tenant":"e2e-shared-a-cd8cf5","userId":"9af01b9b-d229-4cd0-9f7a-707519784bbf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c151904-6bb5-4dd7-aac5-5ec22db7dbe1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c151904-6bb5-4dd7-aac5-5ec22db7dbe1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c151904-6bb5-4dd7-aac5-5ec22db7dbe1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c151904-6bb5-4dd7-aac5-5ec22db7dbe1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/sub-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c151904-6bb5-4dd7-aac5-5ec22db7dbe1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-73106c"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c151904-6bb5-4dd7-aac5-5ec22db7dbe1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c151904-6bb5-4dd7-aac5-5ec22db7dbe1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c151904-6bb5-4dd7-aac5-5ec22db7dbe1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c151904-6bb5-4dd7-aac5-5ec22db7dbe1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c151904-6bb5-4dd7-aac5-5ec22db7dbe1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6763ba2-27bd-4961-b1e6-7d62384a9da1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36964","PortSpecifier":{"PortValue":36964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6763ba2-27bd-4961-b1e6-7d62384a9da1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6763ba2-27bd-4961-b1e6-7d62384a9da1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36964","PortSpecifier":{"PortValue":36964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024292,"nanos":378961105},"http":{"id":"e6763ba2-27bd-4961-b1e6-7d62384a9da1","method":"GET","headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6763ba2-27bd-4961-b1e6-7d62384a9da1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TPitKSoJBI0hINA0_N7j3rOUntpNcfGFFdTBilDnotyfbG5e22Idpggu55sv"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6763ba2-27bd-4961-b1e6-7d62384a9da1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fa5d1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TPitKSoJBI0hINA0_N7j3rOUntpNcfGFFdTBilDnotyfbG5e22Idpggu55sv\"}"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6763ba2-27bd-4961-b1e6-7d62384a9da1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fa5d1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"db70b8b1-7059-4de5-b92d-6ec8dbc59b29","keyName":"e2e-sub-iso-63f169","subscription":"e2e-b-only-73106c","tenant":"e2e-shared-b-fa5d1d","userId":"db70b8b1-7059-4de5-b92d-6ec8dbc59b29","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6763ba2-27bd-4961-b1e6-7d62384a9da1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6763ba2-27bd-4961-b1e6-7d62384a9da1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6763ba2-27bd-4961-b1e6-7d62384a9da1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6763ba2-27bd-4961-b1e6-7d62384a9da1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa5d1d/sub-test-model-fa5d1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6763ba2-27bd-4961-b1e6-7d62384a9da1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e6763ba2-27bd-4961-b1e6-7d62384a9da1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6763ba2-27bd-4961-b1e6-7d62384a9da1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-73106c"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6763ba2-27bd-4961-b1e6-7d62384a9da1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6763ba2-27bd-4961-b1e6-7d62384a9da1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:31:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6763ba2-27bd-4961-b1e6-7d62384a9da1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15888937-1c15-4e9d-a887-a3d65eb7bf9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39048","PortSpecifier":{"PortValue":39048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15888937-1c15-4e9d-a887-a3d65eb7bf9f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15888937-1c15-4e9d-a887-a3d65eb7bf9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39048","PortSpecifier":{"PortValue":39048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024310,"nanos":799484819},"http":{"id":"15888937-1c15-4e9d-a887-a3d65eb7bf9f","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15888937-1c15-4e9d-a887-a3d65eb7bf9f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15888937-1c15-4e9d-a887-a3d65eb7bf9f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15888937-1c15-4e9d-a887-a3d65eb7bf9f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15888937-1c15-4e9d-a887-a3d65eb7bf9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15888937-1c15-4e9d-a887-a3d65eb7bf9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15888937-1c15-4e9d-a887-a3d65eb7bf9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/sub-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15888937-1c15-4e9d-a887-a3d65eb7bf9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15888937-1c15-4e9d-a887-a3d65eb7bf9f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15888937-1c15-4e9d-a887-a3d65eb7bf9f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15888937-1c15-4e9d-a887-a3d65eb7bf9f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15888937-1c15-4e9d-a887-a3d65eb7bf9f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95dbaf63-061b-455d-bb88-17dd3a51b809","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51042","PortSpecifier":{"PortValue":51042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95dbaf63-061b-455d-bb88-17dd3a51b809","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95dbaf63-061b-455d-bb88-17dd3a51b809","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51042","PortSpecifier":{"PortValue":51042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024310,"nanos":838374309},"http":{"id":"95dbaf63-061b-455d-bb88-17dd3a51b809","method":"POST","headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"95dbaf63-061b-455d-bb88-17dd3a51b809","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95dbaf63-061b-455d-bb88-17dd3a51b809","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95dbaf63-061b-455d-bb88-17dd3a51b809","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95dbaf63-061b-455d-bb88-17dd3a51b809","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95dbaf63-061b-455d-bb88-17dd3a51b809","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95dbaf63-061b-455d-bb88-17dd3a51b809","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa5d1d/sub-test-model-fa5d1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"95dbaf63-061b-455d-bb88-17dd3a51b809","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95dbaf63-061b-455d-bb88-17dd3a51b809","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95dbaf63-061b-455d-bb88-17dd3a51b809","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95dbaf63-061b-455d-bb88-17dd3a51b809","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95dbaf63-061b-455d-bb88-17dd3a51b809","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39bceca7-0b8e-4653-b3ea-a6714bc8ede5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39054","PortSpecifier":{"PortValue":39054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39bceca7-0b8e-4653-b3ea-a6714bc8ede5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39bceca7-0b8e-4653-b3ea-a6714bc8ede5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39054","PortSpecifier":{"PortValue":39054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024310,"nanos":879959275},"http":{"id":"39bceca7-0b8e-4653-b3ea-a6714bc8ede5","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39bceca7-0b8e-4653-b3ea-a6714bc8ede5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CyCWoAriaUFnbEO4_YIJMjJFAfV0V65b7Gs4Wm5ZwDX7N5BvrPKSfSKFuKm3"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39bceca7-0b8e-4653-b3ea-a6714bc8ede5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CyCWoAriaUFnbEO4_YIJMjJFAfV0V65b7Gs4Wm5ZwDX7N5BvrPKSfSKFuKm3\"}"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39bceca7-0b8e-4653-b3ea-a6714bc8ede5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"54bd2f4b-24c8-4b17-8fe7-0afad016b391","keyName":"e2e-sub-iso-db1c2e","subscription":"e2e-shared-sub-e55ceb","tenant":"e2e-shared-a-cd8cf5","userId":"54bd2f4b-24c8-4b17-8fe7-0afad016b391","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39bceca7-0b8e-4653-b3ea-a6714bc8ede5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39bceca7-0b8e-4653-b3ea-a6714bc8ede5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39bceca7-0b8e-4653-b3ea-a6714bc8ede5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39bceca7-0b8e-4653-b3ea-a6714bc8ede5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/sub-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39bceca7-0b8e-4653-b3ea-a6714bc8ede5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39bceca7-0b8e-4653-b3ea-a6714bc8ede5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e55ceb"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39bceca7-0b8e-4653-b3ea-a6714bc8ede5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39bceca7-0b8e-4653-b3ea-a6714bc8ede5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39bceca7-0b8e-4653-b3ea-a6714bc8ede5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39bceca7-0b8e-4653-b3ea-a6714bc8ede5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2ee90e7-3b6e-4491-9a23-934100080ffb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51052","PortSpecifier":{"PortValue":51052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2ee90e7-3b6e-4491-9a23-934100080ffb","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2ee90e7-3b6e-4491-9a23-934100080ffb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51052","PortSpecifier":{"PortValue":51052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024310,"nanos":910187892},"http":{"id":"b2ee90e7-3b6e-4491-9a23-934100080ffb","method":"POST","headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2ee90e7-3b6e-4491-9a23-934100080ffb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bXi5WPPzQ8CaRicu_393dL54sBLyjjpP1cefApAq4nvPTK9tWlXshyDRd6nY"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2ee90e7-3b6e-4491-9a23-934100080ffb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fa5d1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bXi5WPPzQ8CaRicu_393dL54sBLyjjpP1cefApAq4nvPTK9tWlXshyDRd6nY\"}"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2ee90e7-3b6e-4491-9a23-934100080ffb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fa5d1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3518e0ee-ab95-45d4-8d75-f65864304225","keyName":"e2e-sub-iso-e053eb","subscription":"e2e-shared-sub-e55ceb","tenant":"e2e-shared-b-fa5d1d","userId":"3518e0ee-ab95-45d4-8d75-f65864304225","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2ee90e7-3b6e-4491-9a23-934100080ffb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2ee90e7-3b6e-4491-9a23-934100080ffb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2ee90e7-3b6e-4491-9a23-934100080ffb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2ee90e7-3b6e-4491-9a23-934100080ffb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa5d1d/sub-test-model-fa5d1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2ee90e7-3b6e-4491-9a23-934100080ffb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e55ceb"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2ee90e7-3b6e-4491-9a23-934100080ffb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2ee90e7-3b6e-4491-9a23-934100080ffb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2ee90e7-3b6e-4491-9a23-934100080ffb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2ee90e7-3b6e-4491-9a23-934100080ffb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2ee90e7-3b6e-4491-9a23-934100080ffb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c778ac0e0910dcfe3e081d4e58d6585bfbcf513a191d886878708bfb94beab5"}
{"level":"info","ts":"2026-07-02T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/751d04197b1e4790f3e0a4ea9d8b3fb7a7c7f2c7bca20492c823a83c12f9213d"}
{"level":"info","ts":"2026-07-02T20:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c360cf4695ccf9a76ab2d842b21158fd9b1e6b4904dde4b1f8a8104923bc9d69"}
{"level":"info","ts":"2026-07-02T20:32:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4bc233aab08f23ed29fbb3dd8024497cd95af3b4ba692cd76041a9831a286d2"}
{"level":"info","ts":"2026-07-02T20:32:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e61868f0ad0be69eb72c500259ec100b549dfa434081094898cad09dbec591a0"}
{"level":"info","ts":"2026-07-02T20:32:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e136fb6bc563479472399a5f9988521978dbde5766f2da3ed56146a54843463"}
{"level":"info","ts":"2026-07-02T20:32:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00da846ac7910f176af1b28600d501b56db11480de7217c35a1ac1a73e6b7722"}
{"level":"info","ts":"2026-07-02T20:32:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e32be18b4ad43981020d9d444d92998b82d2153c179cdb79f3f003ee60bb2961"}
{"level":"info","ts":"2026-07-02T20:32:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd2816e5849134b93dc69f591c6dd52b92670dd25c04146d23384cce23054c8b"}
{"level":"info","ts":"2026-07-02T20:32:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ad0aecea229ba06730313c70d22f5e3da6fac79e4484581201a3401ec4969e6"}
{"level":"info","ts":"2026-07-02T20:32:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f61af9fe83f700000d1304f4bf53949ed71540b8f7322d16771fb23b0a17cdd"}
{"level":"info","ts":"2026-07-02T20:32:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a4c05867f723508f07f7390f222fe1085b81dfded32d585b9bbf5042c01d06a"}
{"level":"info","ts":"2026-07-02T20:32:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c47bb02ba6a659081c9ed8c183aa210f1a985050c6e0b5672be63bdff224d6b"}
{"level":"info","ts":"2026-07-02T20:32:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88a07a9f0a543f7d01cfc0a1f0837bb144f395ee0a73578876bae04a0e8cdbcd"}
{"level":"info","ts":"2026-07-02T20:32:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/874917c1e69f73642036e3b2578a6cf3c33b9d0b2b79d2c83a9588f807515213"}
{"level":"info","ts":"2026-07-02T20:32:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85645390439ca0cd39130acce8961ac65f8b59c3b29eab3b748769f3b402be47"}
{"level":"debug","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f"}
{"level":"debug","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f"}
{"level":"debug","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f"}
{"level":"debug","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f"}
{"level":"debug","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f"}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f"}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f"}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f"}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f"}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77"}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77"}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548"}
{"level":"error","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77"}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548"}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490d6314d02a40a52c37fba4939f945524c9b2dcfc49864cc16ee27ecb280c83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490d6314d02a40a52c37fba4939f945524c9b2dcfc49864cc16ee27ecb280c83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490d6314d02a40a52c37fba4939f945524c9b2dcfc49864cc16ee27ecb280c83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490d6314d02a40a52c37fba4939f945524c9b2dcfc49864cc16ee27ecb280c83"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490d6314d02a40a52c37fba4939f945524c9b2dcfc49864cc16ee27ecb280c83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490d6314d02a40a52c37fba4939f945524c9b2dcfc49864cc16ee27ecb280c83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490d6314d02a40a52c37fba4939f945524c9b2dcfc49864cc16ee27ecb280c83"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490d6314d02a40a52c37fba4939f945524c9b2dcfc49864cc16ee27ecb280c83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490d6314d02a40a52c37fba4939f945524c9b2dcfc49864cc16ee27ecb280c83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490d6314d02a40a52c37fba4939f945524c9b2dcfc49864cc16ee27ecb280c83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490d6314d02a40a52c37fba4939f945524c9b2dcfc49864cc16ee27ecb280c83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff"}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490d6314d02a40a52c37fba4939f945524c9b2dcfc49864cc16ee27ecb280c83"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff"}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4"}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d"}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de"}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d"}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de"}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d"}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de"}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de"}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de"}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de"}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de"}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de"}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de"}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940"}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940"}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940"}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940"}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940"}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940"}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940"}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940"}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91"}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91"}
{"level":"error","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91"}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"898ab7f6959accc0225e3094aa604238368ca550092def5fe258c0a96a09acdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/898ab7f6959accc0225e3094aa604238368ca550092def5fe258c0a96a09acdf"}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"898ab7f6959accc0225e3094aa604238368ca550092def5fe258c0a96a09acdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"898ab7f6959accc0225e3094aa604238368ca550092def5fe258c0a96a09acdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["898ab7f6959accc0225e3094aa604238368ca550092def5fe258c0a96a09acdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"898ab7f6959accc0225e3094aa604238368ca550092def5fe258c0a96a09acdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91"}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/898ab7f6959accc0225e3094aa604238368ca550092def5fe258c0a96a09acdf"}
{"level":"info","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"898ab7f6959accc0225e3094aa604238368ca550092def5fe258c0a96a09acdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd"}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd"}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d"}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd"}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d"}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd"}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ad1ac20d7f6ff133ebb9feabcfb978ea51fe3be350c10c516153374eddb751f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d"}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ad1ac20d7f6ff133ebb9feabcfb978ea51fe3be350c10c516153374eddb751f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ad1ac20d7f6ff133ebb9feabcfb978ea51fe3be350c10c516153374eddb751f"}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ad1ac20d7f6ff133ebb9feabcfb978ea51fe3be350c10c516153374eddb751f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ad1ac20d7f6ff133ebb9feabcfb978ea51fe3be350c10c516153374eddb751f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ad1ac20d7f6ff133ebb9feabcfb978ea51fe3be350c10c516153374eddb751f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd"}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ad1ac20d7f6ff133ebb9feabcfb978ea51fe3be350c10c516153374eddb751f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d"}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ad1ac20d7f6ff133ebb9feabcfb978ea51fe3be350c10c516153374eddb751f"}
{"level":"info","ts":"2026-07-02T20:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd"}
{"level":"debug","ts":"2026-07-02T20:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4"}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff"}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff"}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff"}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548"}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77"}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"898ab7f6959accc0225e3094aa604238368ca550092def5fe258c0a96a09acdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d"}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490d6314d02a40a52c37fba4939f945524c9b2dcfc49864cc16ee27ecb280c83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/898ab7f6959accc0225e3094aa604238368ca550092def5fe258c0a96a09acdf"}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490d6314d02a40a52c37fba4939f945524c9b2dcfc49864cc16ee27ecb280c83"}
{"level":"error","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940"}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127"}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd"}
{"level":"debug","ts":"2026-07-02T20:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T20:32:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ad1ac20d7f6ff133ebb9feabcfb978ea51fe3be350c10c516153374eddb751f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"}
{"level":"debug","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T20:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T20:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de"}
{"level":"info","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91"}
{"level":"info","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd"}
{"level":"info","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ad1ac20d7f6ff133ebb9feabcfb978ea51fe3be350c10c516153374eddb751f"}
{"level":"info","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f"}
{"level":"info","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"}
{"level":"info","ts":"2026-07-02T20:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d"}
{"level":"info","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc2a4b46-760f-4a07-8b85-c8246a1261d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51984","PortSpecifier":{"PortValue":51984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc2a4b46-760f-4a07-8b85-c8246a1261d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc2a4b46-760f-4a07-8b85-c8246a1261d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51984","PortSpecifier":{"PortValue":51984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024386,"nanos":452573285},"http":{"id":"dc2a4b46-760f-4a07-8b85-c8246a1261d2","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dc2a4b46-760f-4a07-8b85-c8246a1261d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc2a4b46-760f-4a07-8b85-c8246a1261d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc2a4b46-760f-4a07-8b85-c8246a1261d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc2a4b46-760f-4a07-8b85-c8246a1261d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc2a4b46-760f-4a07-8b85-c8246a1261d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc2a4b46-760f-4a07-8b85-c8246a1261d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc2a4b46-760f-4a07-8b85-c8246a1261d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc2a4b46-760f-4a07-8b85-c8246a1261d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc2a4b46-760f-4a07-8b85-c8246a1261d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc2a4b46-760f-4a07-8b85-c8246a1261d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc2a4b46-760f-4a07-8b85-c8246a1261d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42f7b229-ecd4-4e1c-bcfd-b4c61a1b8dc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52828","PortSpecifier":{"PortValue":52828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42f7b229-ecd4-4e1c-bcfd-b4c61a1b8dc0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42f7b229-ecd4-4e1c-bcfd-b4c61a1b8dc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52828","PortSpecifier":{"PortValue":52828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024386,"nanos":494647397},"http":{"id":"42f7b229-ecd4-4e1c-bcfd-b4c61a1b8dc0","method":"POST","headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42f7b229-ecd4-4e1c-bcfd-b4c61a1b8dc0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42f7b229-ecd4-4e1c-bcfd-b4c61a1b8dc0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42f7b229-ecd4-4e1c-bcfd-b4c61a1b8dc0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42f7b229-ecd4-4e1c-bcfd-b4c61a1b8dc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42f7b229-ecd4-4e1c-bcfd-b4c61a1b8dc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42f7b229-ecd4-4e1c-bcfd-b4c61a1b8dc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa5d1d/rate-test-model-fa5d1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42f7b229-ecd4-4e1c-bcfd-b4c61a1b8dc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42f7b229-ecd4-4e1c-bcfd-b4c61a1b8dc0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42f7b229-ecd4-4e1c-bcfd-b4c61a1b8dc0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42f7b229-ecd4-4e1c-bcfd-b4c61a1b8dc0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42f7b229-ecd4-4e1c-bcfd-b4c61a1b8dc0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51990","PortSpecifier":{"PortValue":51990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","method":"POST","path":"/ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5/v1/completions","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51990","PortSpecifier":{"PortValue":51990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024386,"nanos":539426475},"http":{"id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TvXekbHbMSHkfi9g_4eWpQhGyHX894h1Pnu7arnvnsAOKGECXMcGABoPKbjB"}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TvXekbHbMSHkfi9g_4eWpQhGyHX894h1Pnu7arnvnsAOKGECXMcGABoPKbjB\"}"}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e052e08a-68ed-4486-a01e-1023e9a83ab3","keyName":"e2e-rate-a-9b14db","subscription":"e2e-rate-iso-a-9b14db","tenant":"e2e-shared-a-cd8cf5","userId":"e052e08a-68ed-4486-a01e-1023e9a83ab3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5\",\"requestedSubscription\":\"e2e-rate-iso-a-9b14db\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd8cf5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9b14db","namespace":"ai-tenant-e2e-shared-a-cd8cf5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9b14db"}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e052e08a-68ed-4486-a01e-1023e9a83ab3","keyName":"e2e-rate-a-9b14db","selected_subscription":"e2e-rate-iso-a-9b14db","selected_subscription_key":"ai-tenant-e2e-shared-a-cd8cf5/e2e-rate-iso-a-9b14db@ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd8cf5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9b14db","namespace":"ai-tenant-e2e-shared-a-cd8cf5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:33:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb96b6ea-c0e5-4392-bc88-47982ea974f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51992","PortSpecifier":{"PortValue":51992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d48e801b-3bde-4b34-b83a-2113d3953b59","method":"POST","path":"/ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5/v1/completions","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51992","PortSpecifier":{"PortValue":51992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024387,"nanos":602677066},"http":{"id":"d48e801b-3bde-4b34-b83a-2113d3953b59","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TvXekbHbMSHkfi9g_4eWpQhGyHX894h1Pnu7arnvnsAOKGECXMcGABoPKbjB"}
{"level":"debug","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TvXekbHbMSHkfi9g_4eWpQhGyHX894h1Pnu7arnvnsAOKGECXMcGABoPKbjB\"}"}
{"level":"debug","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e052e08a-68ed-4486-a01e-1023e9a83ab3","keyName":"e2e-rate-a-9b14db","subscription":"e2e-rate-iso-a-9b14db","tenant":"e2e-shared-a-cd8cf5","userId":"e052e08a-68ed-4486-a01e-1023e9a83ab3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5\",\"requestedSubscription\":\"e2e-rate-iso-a-9b14db\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd8cf5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9b14db","namespace":"ai-tenant-e2e-shared-a-cd8cf5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9b14db"}
{"level":"debug","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e052e08a-68ed-4486-a01e-1023e9a83ab3","keyName":"e2e-rate-a-9b14db","selected_subscription":"e2e-rate-iso-a-9b14db","selected_subscription_key":"ai-tenant-e2e-shared-a-cd8cf5/e2e-rate-iso-a-9b14db@ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd8cf5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9b14db","namespace":"ai-tenant-e2e-shared-a-cd8cf5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:33:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d48e801b-3bde-4b34-b83a-2113d3953b59","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52000","PortSpecifier":{"PortValue":52000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","method":"POST","path":"/ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5/v1/completions","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52000","PortSpecifier":{"PortValue":52000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024388,"nanos":643607229},"http":{"id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TvXekbHbMSHkfi9g_4eWpQhGyHX894h1Pnu7arnvnsAOKGECXMcGABoPKbjB"}
{"level":"debug","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TvXekbHbMSHkfi9g_4eWpQhGyHX894h1Pnu7arnvnsAOKGECXMcGABoPKbjB\"}"}
{"level":"debug","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e052e08a-68ed-4486-a01e-1023e9a83ab3","keyName":"e2e-rate-a-9b14db","subscription":"e2e-rate-iso-a-9b14db","tenant":"e2e-shared-a-cd8cf5","userId":"e052e08a-68ed-4486-a01e-1023e9a83ab3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5\",\"requestedSubscription\":\"e2e-rate-iso-a-9b14db\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd8cf5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9b14db","namespace":"ai-tenant-e2e-shared-a-cd8cf5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9b14db"}
{"level":"debug","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e052e08a-68ed-4486-a01e-1023e9a83ab3","keyName":"e2e-rate-a-9b14db","selected_subscription":"e2e-rate-iso-a-9b14db","selected_subscription_key":"ai-tenant-e2e-shared-a-cd8cf5/e2e-rate-iso-a-9b14db@ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd8cf5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9b14db","namespace":"ai-tenant-e2e-shared-a-cd8cf5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:33:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16dfc9a6-09e8-4e13-bbc2-730809a50cc7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9c8d278-2141-4ec0-bd30-86bc1f98bfea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55552","PortSpecifier":{"PortValue":55552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9c8d278-2141-4ec0-bd30-86bc1f98bfea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9c8d278-2141-4ec0-bd30-86bc1f98bfea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55552","PortSpecifier":{"PortValue":55552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024399,"nanos":382409436},"http":{"id":"d9c8d278-2141-4ec0-bd30-86bc1f98bfea","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d9c8d278-2141-4ec0-bd30-86bc1f98bfea","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9c8d278-2141-4ec0-bd30-86bc1f98bfea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9c8d278-2141-4ec0-bd30-86bc1f98bfea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9c8d278-2141-4ec0-bd30-86bc1f98bfea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9c8d278-2141-4ec0-bd30-86bc1f98bfea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9c8d278-2141-4ec0-bd30-86bc1f98bfea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d9c8d278-2141-4ec0-bd30-86bc1f98bfea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9c8d278-2141-4ec0-bd30-86bc1f98bfea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9c8d278-2141-4ec0-bd30-86bc1f98bfea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9c8d278-2141-4ec0-bd30-86bc1f98bfea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9c8d278-2141-4ec0-bd30-86bc1f98bfea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba9c84e3-6978-4267-b94d-6f412ca35caa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37830","PortSpecifier":{"PortValue":37830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba9c84e3-6978-4267-b94d-6f412ca35caa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba9c84e3-6978-4267-b94d-6f412ca35caa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37830","PortSpecifier":{"PortValue":37830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024399,"nanos":424992848},"http":{"id":"ba9c84e3-6978-4267-b94d-6f412ca35caa","method":"POST","headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba9c84e3-6978-4267-b94d-6f412ca35caa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba9c84e3-6978-4267-b94d-6f412ca35caa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"]}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba9c84e3-6978-4267-b94d-6f412ca35caa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/827a0e268794"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b260fba-f832-4cc5-900c-517a463f6def"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"35928bcc-6c6a-4153-a7d6-11cf3669d621","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba9c84e3-6978-4267-b94d-6f412ca35caa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba9c84e3-6978-4267-b94d-6f412ca35caa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba9c84e3-6978-4267-b94d-6f412ca35caa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa5d1d/rate-test-model-fa5d1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba9c84e3-6978-4267-b94d-6f412ca35caa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba9c84e3-6978-4267-b94d-6f412ca35caa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba9c84e3-6978-4267-b94d-6f412ca35caa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba9c84e3-6978-4267-b94d-6f412ca35caa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba9c84e3-6978-4267-b94d-6f412ca35caa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55554","PortSpecifier":{"PortValue":55554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","method":"POST","path":"/ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5/v1/completions","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55554","PortSpecifier":{"PortValue":55554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024399,"nanos":468178599},"http":{"id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CkQXN63BGItJxwj9_6V4RGp2LecEsv9zajaIDYaK9syG04cdB0h8zv2r77li"}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CkQXN63BGItJxwj9_6V4RGp2LecEsv9zajaIDYaK9syG04cdB0h8zv2r77li\"}"}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"23c0753d-7e47-4e39-936b-29471cf7efb9","keyName":"e2e-rate-a-653c1f","subscription":"e2e-rate-iso-a-653c1f","tenant":"e2e-shared-a-cd8cf5","userId":"23c0753d-7e47-4e39-936b-29471cf7efb9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5\",\"requestedSubscription\":\"e2e-rate-iso-a-653c1f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd8cf5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-653c1f","namespace":"ai-tenant-e2e-shared-a-cd8cf5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-653c1f"}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"23c0753d-7e47-4e39-936b-29471cf7efb9","keyName":"e2e-rate-a-653c1f","selected_subscription":"e2e-rate-iso-a-653c1f","selected_subscription_key":"ai-tenant-e2e-shared-a-cd8cf5/e2e-rate-iso-a-653c1f@ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd8cf5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-653c1f","namespace":"ai-tenant-e2e-shared-a-cd8cf5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:33:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"011a67f7-c0c8-45f1-8a3d-9d92e8bf846a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55556","PortSpecifier":{"PortValue":55556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","method":"POST","path":"/ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5/v1/completions","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55556","PortSpecifier":{"PortValue":55556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024400,"nanos":508145138},"http":{"id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CkQXN63BGItJxwj9_6V4RGp2LecEsv9zajaIDYaK9syG04cdB0h8zv2r77li"}
{"level":"debug","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CkQXN63BGItJxwj9_6V4RGp2LecEsv9zajaIDYaK9syG04cdB0h8zv2r77li\"}"}
{"level":"debug","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"23c0753d-7e47-4e39-936b-29471cf7efb9","keyName":"e2e-rate-a-653c1f","subscription":"e2e-rate-iso-a-653c1f","tenant":"e2e-shared-a-cd8cf5","userId":"23c0753d-7e47-4e39-936b-29471cf7efb9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5\",\"requestedSubscription\":\"e2e-rate-iso-a-653c1f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd8cf5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-653c1f","namespace":"ai-tenant-e2e-shared-a-cd8cf5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-653c1f"}
{"level":"debug","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"23c0753d-7e47-4e39-936b-29471cf7efb9","keyName":"e2e-rate-a-653c1f","selected_subscription":"e2e-rate-iso-a-653c1f","selected_subscription_key":"ai-tenant-e2e-shared-a-cd8cf5/e2e-rate-iso-a-653c1f@ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd8cf5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-653c1f","namespace":"ai-tenant-e2e-shared-a-cd8cf5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b75f70f4-ae6f-41ca-8b6f-2d3502c3d20d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55558","PortSpecifier":{"PortValue":55558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","method":"POST","path":"/ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5/v1/completions","host":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55558","PortSpecifier":{"PortValue":55558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024401,"nanos":545065741},"http":{"id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","method":"POST","headers":{":authority":"e2e-shared-a-cd8cf5.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CkQXN63BGItJxwj9_6V4RGp2LecEsv9zajaIDYaK9syG04cdB0h8zv2r77li"}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CkQXN63BGItJxwj9_6V4RGp2LecEsv9zajaIDYaK9syG04cdB0h8zv2r77li\"}"}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"23c0753d-7e47-4e39-936b-29471cf7efb9","keyName":"e2e-rate-a-653c1f","subscription":"e2e-rate-iso-a-653c1f","tenant":"e2e-shared-a-cd8cf5","userId":"23c0753d-7e47-4e39-936b-29471cf7efb9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5\",\"requestedSubscription\":\"e2e-rate-iso-a-653c1f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd8cf5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd8cf5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-653c1f","namespace":"ai-tenant-e2e-shared-a-cd8cf5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-653c1f"}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"23c0753d-7e47-4e39-936b-29471cf7efb9","keyName":"e2e-rate-a-653c1f","selected_subscription":"e2e-rate-iso-a-653c1f","selected_subscription_key":"ai-tenant-e2e-shared-a-cd8cf5/e2e-rate-iso-a-653c1f@ai-tenant-e2e-shared-a-cd8cf5/rate-test-model-cd8cf5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd8cf5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-653c1f","namespace":"ai-tenant-e2e-shared-a-cd8cf5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a0384ab-e2fd-4590-8bf6-e3f5052944af","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37842","PortSpecifier":{"PortValue":37842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","method":"POST","path":"/ai-tenant-e2e-shared-b-fa5d1d/rate-test-model-fa5d1d/v1/completions","host":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37842","PortSpecifier":{"PortValue":37842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783024401,"nanos":580432415},"http":{"id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","method":"POST","headers":{":authority":"e2e-shared-b-fa5d1d.apps.0f9a818a-06e8-4348-b784-827a0e268794.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-fa5d1d/rate-test-model-fa5d1d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1M4adNAyqdGucGNmy_4x6T9jCpCdIziWKVBVzwXv1s66zgeMY7TUuJANmvwAY"}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fa5d1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1M4adNAyqdGucGNmy_4x6T9jCpCdIziWKVBVzwXv1s66zgeMY7TUuJANmvwAY\"}"}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fa5d1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"46530473-c4f7-4717-9648-0c6e35e51cea","keyName":"e2e-rate-b-653c1f","subscription":"e2e-rate-iso-b-653c1f","tenant":"e2e-shared-b-fa5d1d","userId":"46530473-c4f7-4717-9648-0c6e35e51cea","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-fa5d1d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-fa5d1d/rate-test-model-fa5d1d\",\"requestedSubscription\":\"e2e-rate-iso-b-653c1f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fa5d1d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fa5d1d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-653c1f","namespace":"ai-tenant-e2e-shared-b-fa5d1d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa5d1d/rate-test-model-fa5d1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-653c1f"}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"46530473-c4f7-4717-9648-0c6e35e51cea","keyName":"e2e-rate-b-653c1f","selected_subscription":"e2e-rate-iso-b-653c1f","selected_subscription_key":"ai-tenant-e2e-shared-b-fa5d1d/e2e-rate-iso-b-653c1f@ai-tenant-e2e-shared-b-fa5d1d/rate-test-model-fa5d1d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fa5d1d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-653c1f","namespace":"ai-tenant-e2e-shared-b-fa5d1d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T20:33:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6b28073-bf2e-46c6-8168-7d23fe4d2d09","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T20:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9755809bbb68ac65f379c3536e094d66ac3b92a99755cebac136b61a682dcbf"}
{"level":"info","ts":"2026-07-02T20:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93c3870f6f7d8bb431fe1905c8ba4c1c7937447d4f73c6db7f1382785065baff"}
{"level":"info","ts":"2026-07-02T20:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/490d6314d02a40a52c37fba4939f945524c9b2dcfc49864cc16ee27ecb280c83"}
{"level":"info","ts":"2026-07-02T20:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0612946289bb2708af7cdd1c375983ed4d7963e49e89cb0b89efc746d062874d"}
{"level":"info","ts":"2026-07-02T20:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d20e3017864929be7cc6679d936d366f1b2b73791dc99b3c52313662fe3a02de"}
{"level":"info","ts":"2026-07-02T20:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe16d0d6f3142c4ff8b5c1d369f4eb7b075821d841f378c0c38a1effbeabf90d"}
{"level":"info","ts":"2026-07-02T20:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d364004ff79a1a337380d2529b83f168432e26a276bdf67d4fcd03ea62e84940"}
{"level":"info","ts":"2026-07-02T20:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f7f4ed8360b7266be28298f6d5e6dc13f7e18e3d86794ba4ee2b6ed4332ef91"}
{"level":"info","ts":"2026-07-02T20:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67b606cb70b0d6a4c7b6af9898089626b67186a9970cee38e00bc1263883b79f"}
{"level":"info","ts":"2026-07-02T20:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/602619553e45e7875114eefd2da578e819d56a22645ed4006db183bbdbab78a8"}
{"level":"info","ts":"2026-07-02T20:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b9b2ecb140d82a69d9ed5ce2d72c1b2a585866ee535156f3aeea8bd08f837fd"}
{"level":"info","ts":"2026-07-02T20:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f9f0efbbcde99a3365c0d1a5179d9daa0921dd04f9e2ecd315616e65673c548"}
{"level":"info","ts":"2026-07-02T20:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2685076d2a16a466765ed8537f5d325b4f6693e51c4d3e1e9b4339db983e526"}
{"level":"info","ts":"2026-07-02T20:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97c1e8993ae9afbf317f5d594caa0f5fabfc5b388c34a06391a978dfb7528d77"}
{"level":"info","ts":"2026-07-02T20:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ad1ac20d7f6ff133ebb9feabcfb978ea51fe3be350c10c516153374eddb751f"}
{"level":"info","ts":"2026-07-02T20:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bcee317a3328a3e88d878df01201acb577c685eff19e8bb12abd664eee286db"}
{"level":"info","ts":"2026-07-02T20:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/898ab7f6959accc0225e3094aa604238368ca550092def5fe258c0a96a09acdf"}
{"level":"info","ts":"2026-07-02T20:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7beb2bf3bdaf028a5c1db95c0c36cfdd0f95583e5513d26c6a8c6fe446e1fe4"}
{"level":"info","ts":"2026-07-02T20:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/753ae6d42beae0d1021284af54f80de767e1f023e900ea55c6cc3f5bbb2c4127"}
{"level":"info","ts":"2026-07-02T20:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0717863658858e0ae7c25702af3b206968ce9dc8b29cc47837aae28e5dd86602"}