--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70"}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70"}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70"}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70"}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcca1921f88e2593676618cb939c4c02df8be352d3a30776bae9553b18b3a9d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcca1921f88e2593676618cb939c4c02df8be352d3a30776bae9553b18b3a9d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70"}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcca1921f88e2593676618cb939c4c02df8be352d3a30776bae9553b18b3a9d5"}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcca1921f88e2593676618cb939c4c02df8be352d3a30776bae9553b18b3a9d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcca1921f88e2593676618cb939c4c02df8be352d3a30776bae9553b18b3a9d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcca1921f88e2593676618cb939c4c02df8be352d3a30776bae9553b18b3a9d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcca1921f88e2593676618cb939c4c02df8be352d3a30776bae9553b18b3a9d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70"}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcca1921f88e2593676618cb939c4c02df8be352d3a30776bae9553b18b3a9d5"}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70"}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971"}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971"}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971"}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e983a2b2157d0b93a69af9e2d001764b879262c7a5aa9f52eeb5c7f11ac7b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65"}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e983a2b2157d0b93a69af9e2d001764b879262c7a5aa9f52eeb5c7f11ac7b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e983a2b2157d0b93a69af9e2d001764b879262c7a5aa9f52eeb5c7f11ac7b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e983a2b2157d0b93a69af9e2d001764b879262c7a5aa9f52eeb5c7f11ac7b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971"}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e983a2b2157d0b93a69af9e2d001764b879262c7a5aa9f52eeb5c7f11ac7b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e983a2b2157d0b93a69af9e2d001764b879262c7a5aa9f52eeb5c7f11ac7b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e21d5c58165f75999b7289c44e4ae7a74148db55242925b36bd1d118d690bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e983a2b2157d0b93a69af9e2d001764b879262c7a5aa9f52eeb5c7f11ac7b8"}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e21d5c58165f75999b7289c44e4ae7a74148db55242925b36bd1d118d690bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e983a2b2157d0b93a69af9e2d001764b879262c7a5aa9f52eeb5c7f11ac7b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e983a2b2157d0b93a69af9e2d001764b879262c7a5aa9f52eeb5c7f11ac7b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e983a2b2157d0b93a69af9e2d001764b879262c7a5aa9f52eeb5c7f11ac7b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47b2c4f79ca63940fc465e6428a4a0e7ce8f8573eb63e10a8a2e1b0f261943ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65"}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47b2c4f79ca63940fc465e6428a4a0e7ce8f8573eb63e10a8a2e1b0f261943ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e21d5c58165f75999b7289c44e4ae7a74148db55242925b36bd1d118d690bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e21d5c58165f75999b7289c44e4ae7a74148db55242925b36bd1d118d690bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e983a2b2157d0b93a69af9e2d001764b879262c7a5aa9f52eeb5c7f11ac7b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47b2c4f79ca63940fc465e6428a4a0e7ce8f8573eb63e10a8a2e1b0f261943ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e21d5c58165f75999b7289c44e4ae7a74148db55242925b36bd1d118d690bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e21d5c58165f75999b7289c44e4ae7a74148db55242925b36bd1d118d690bd"}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e21d5c58165f75999b7289c44e4ae7a74148db55242925b36bd1d118d690bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02e21d5c58165f75999b7289c44e4ae7a74148db55242925b36bd1d118d690bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e21d5c58165f75999b7289c44e4ae7a74148db55242925b36bd1d118d690bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47b2c4f79ca63940fc465e6428a4a0e7ce8f8573eb63e10a8a2e1b0f261943ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47b2c4f79ca63940fc465e6428a4a0e7ce8f8573eb63e10a8a2e1b0f261943ba"}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47b2c4f79ca63940fc465e6428a4a0e7ce8f8573eb63e10a8a2e1b0f261943ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e21d5c58165f75999b7289c44e4ae7a74148db55242925b36bd1d118d690bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47b2c4f79ca63940fc465e6428a4a0e7ce8f8573eb63e10a8a2e1b0f261943ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47b2c4f79ca63940fc465e6428a4a0e7ce8f8573eb63e10a8a2e1b0f261943ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e983a2b2157d0b93a69af9e2d001764b879262c7a5aa9f52eeb5c7f11ac7b8"}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47b2c4f79ca63940fc465e6428a4a0e7ce8f8573eb63e10a8a2e1b0f261943ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47b2c4f79ca63940fc465e6428a4a0e7ce8f8573eb63e10a8a2e1b0f261943ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e21d5c58165f75999b7289c44e4ae7a74148db55242925b36bd1d118d690bd"}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47b2c4f79ca63940fc465e6428a4a0e7ce8f8573eb63e10a8a2e1b0f261943ba"}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:30:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:30:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"}
{"level":"info","ts":"2026-07-10T17:30:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"402635cf-5681-4b5b-b6da-08f120358f6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57006","PortSpecifier":{"PortValue":57006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"402635cf-5681-4b5b-b6da-08f120358f6f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:30:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"402635cf-5681-4b5b-b6da-08f120358f6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57006","PortSpecifier":{"PortValue":57006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704659,"nanos":958404042},"http":{"id":"402635cf-5681-4b5b-b6da-08f120358f6f","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:30:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"402635cf-5681-4b5b-b6da-08f120358f6f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:30:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"402635cf-5681-4b5b-b6da-08f120358f6f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:30:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"402635cf-5681-4b5b-b6da-08f120358f6f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.135.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:30:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"402635cf-5681-4b5b-b6da-08f120358f6f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:30:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"402635cf-5681-4b5b-b6da-08f120358f6f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:30:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"402635cf-5681-4b5b-b6da-08f120358f6f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/auth-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:30:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"402635cf-5681-4b5b-b6da-08f120358f6f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:30:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"402635cf-5681-4b5b-b6da-08f120358f6f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:30:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"402635cf-5681-4b5b-b6da-08f120358f6f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:30:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"402635cf-5681-4b5b-b6da-08f120358f6f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:30:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"402635cf-5681-4b5b-b6da-08f120358f6f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecfc92d2-2930-4631-b5c1-152abc257b16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37764","PortSpecifier":{"PortValue":37764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ecfc92d2-2930-4631-b5c1-152abc257b16","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecfc92d2-2930-4631-b5c1-152abc257b16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37764","PortSpecifier":{"PortValue":37764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704660,"nanos":24346797},"http":{"id":"ecfc92d2-2930-4631-b5c1-152abc257b16","method":"POST","headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ecfc92d2-2930-4631-b5c1-152abc257b16","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ecfc92d2-2930-4631-b5c1-152abc257b16","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ecfc92d2-2930-4631-b5c1-152abc257b16","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecfc92d2-2930-4631-b5c1-152abc257b16","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecfc92d2-2930-4631-b5c1-152abc257b16","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecfc92d2-2930-4631-b5c1-152abc257b16","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2482f8/auth-test-model-2482f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ecfc92d2-2930-4631-b5c1-152abc257b16","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecfc92d2-2930-4631-b5c1-152abc257b16","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecfc92d2-2930-4631-b5c1-152abc257b16","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecfc92d2-2930-4631-b5c1-152abc257b16","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecfc92d2-2930-4631-b5c1-152abc257b16","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56ae8ab3-0c32-474f-b988-dc65ba7b0993","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57022","PortSpecifier":{"PortValue":57022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56ae8ab3-0c32-474f-b988-dc65ba7b0993","method":"GET","path":"/maas-api/v1/api-keys/bc6858d1-0d40-4cae-bd73-f14a0619b6c3","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56ae8ab3-0c32-474f-b988-dc65ba7b0993","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57022","PortSpecifier":{"PortValue":57022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704660,"nanos":87341021},"http":{"id":"56ae8ab3-0c32-474f-b988-dc65ba7b0993","method":"GET","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bc6858d1-0d40-4cae-bd73-f14a0619b6c3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"56ae8ab3-0c32-474f-b988-dc65ba7b0993","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56ae8ab3-0c32-474f-b988-dc65ba7b0993","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56ae8ab3-0c32-474f-b988-dc65ba7b0993","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.135.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bc6858d1-0d40-4cae-bd73-f14a0619b6c3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56ae8ab3-0c32-474f-b988-dc65ba7b0993","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56ae8ab3-0c32-474f-b988-dc65ba7b0993","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56ae8ab3-0c32-474f-b988-dc65ba7b0993","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/auth-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"56ae8ab3-0c32-474f-b988-dc65ba7b0993","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56ae8ab3-0c32-474f-b988-dc65ba7b0993","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56ae8ab3-0c32-474f-b988-dc65ba7b0993","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56ae8ab3-0c32-474f-b988-dc65ba7b0993","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56ae8ab3-0c32-474f-b988-dc65ba7b0993","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16b622ec-9c0f-4664-a54d-ccac853892ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37772","PortSpecifier":{"PortValue":37772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16b622ec-9c0f-4664-a54d-ccac853892ea","method":"GET","path":"/maas-api/v1/api-keys/b6c1a23c-4c1a-4deb-be94-45ea047c7b0f","host":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16b622ec-9c0f-4664-a54d-ccac853892ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37772","PortSpecifier":{"PortValue":37772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704660,"nanos":121077320},"http":{"id":"16b622ec-9c0f-4664-a54d-ccac853892ea","method":"GET","headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b6c1a23c-4c1a-4deb-be94-45ea047c7b0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16b622ec-9c0f-4664-a54d-ccac853892ea","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16b622ec-9c0f-4664-a54d-ccac853892ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16b622ec-9c0f-4664-a54d-ccac853892ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b6c1a23c-4c1a-4deb-be94-45ea047c7b0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16b622ec-9c0f-4664-a54d-ccac853892ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16b622ec-9c0f-4664-a54d-ccac853892ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16b622ec-9c0f-4664-a54d-ccac853892ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2482f8/auth-test-model-2482f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16b622ec-9c0f-4664-a54d-ccac853892ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16b622ec-9c0f-4664-a54d-ccac853892ea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16b622ec-9c0f-4664-a54d-ccac853892ea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16b622ec-9c0f-4664-a54d-ccac853892ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:31:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16b622ec-9c0f-4664-a54d-ccac853892ea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50e1e6ff-080c-4ebc-914b-55ec2989bfba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35986","PortSpecifier":{"PortValue":35986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50e1e6ff-080c-4ebc-914b-55ec2989bfba","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50e1e6ff-080c-4ebc-914b-55ec2989bfba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35986","PortSpecifier":{"PortValue":35986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704677,"nanos":351799313},"http":{"id":"50e1e6ff-080c-4ebc-914b-55ec2989bfba","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"50e1e6ff-080c-4ebc-914b-55ec2989bfba","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50e1e6ff-080c-4ebc-914b-55ec2989bfba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50e1e6ff-080c-4ebc-914b-55ec2989bfba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.135.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50e1e6ff-080c-4ebc-914b-55ec2989bfba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50e1e6ff-080c-4ebc-914b-55ec2989bfba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50e1e6ff-080c-4ebc-914b-55ec2989bfba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/auth-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50e1e6ff-080c-4ebc-914b-55ec2989bfba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50e1e6ff-080c-4ebc-914b-55ec2989bfba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50e1e6ff-080c-4ebc-914b-55ec2989bfba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50e1e6ff-080c-4ebc-914b-55ec2989bfba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50e1e6ff-080c-4ebc-914b-55ec2989bfba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"931d7c4d-a14e-4056-a109-d604bc0609f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:42654","PortSpecifier":{"PortValue":42654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"931d7c4d-a14e-4056-a109-d604bc0609f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"931d7c4d-a14e-4056-a109-d604bc0609f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:42654","PortSpecifier":{"PortValue":42654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704677,"nanos":385866156},"http":{"id":"931d7c4d-a14e-4056-a109-d604bc0609f1","method":"POST","headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"931d7c4d-a14e-4056-a109-d604bc0609f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"931d7c4d-a14e-4056-a109-d604bc0609f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"931d7c4d-a14e-4056-a109-d604bc0609f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"931d7c4d-a14e-4056-a109-d604bc0609f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"931d7c4d-a14e-4056-a109-d604bc0609f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"931d7c4d-a14e-4056-a109-d604bc0609f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2482f8/auth-test-model-2482f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"931d7c4d-a14e-4056-a109-d604bc0609f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"931d7c4d-a14e-4056-a109-d604bc0609f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"931d7c4d-a14e-4056-a109-d604bc0609f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"931d7c4d-a14e-4056-a109-d604bc0609f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"931d7c4d-a14e-4056-a109-d604bc0609f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa1541cc-f799-47f1-bbf9-67bd36086a65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35988","PortSpecifier":{"PortValue":35988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa1541cc-f799-47f1-bbf9-67bd36086a65","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa1541cc-f799-47f1-bbf9-67bd36086a65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35988","PortSpecifier":{"PortValue":35988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704677,"nanos":422233395},"http":{"id":"fa1541cc-f799-47f1-bbf9-67bd36086a65","method":"GET","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa1541cc-f799-47f1-bbf9-67bd36086a65","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Pj2nTEpmPD5FqZ9Q_RvLibKDgp8o0Odmp0gFlzH39xMqCahjXpXrryqONOz4"}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa1541cc-f799-47f1-bbf9-67bd36086a65","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Pj2nTEpmPD5FqZ9Q_RvLibKDgp8o0Odmp0gFlzH39xMqCahjXpXrryqONOz4\"}"}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa1541cc-f799-47f1-bbf9-67bd36086a65","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75673991-47a8-41e8-a5a5-9c0ad2931370","keyName":"e2e-auth-iso-a-18d1c5","subscription":"e2e-auth-iso-debd2e","tenant":"e2e-shared-a-43091a","userId":"75673991-47a8-41e8-a5a5-9c0ad2931370","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa1541cc-f799-47f1-bbf9-67bd36086a65","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1541cc-f799-47f1-bbf9-67bd36086a65","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1541cc-f799-47f1-bbf9-67bd36086a65","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1541cc-f799-47f1-bbf9-67bd36086a65","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/auth-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa1541cc-f799-47f1-bbf9-67bd36086a65","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa1541cc-f799-47f1-bbf9-67bd36086a65","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa1541cc-f799-47f1-bbf9-67bd36086a65","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-debd2e"}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa1541cc-f799-47f1-bbf9-67bd36086a65","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa1541cc-f799-47f1-bbf9-67bd36086a65","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa1541cc-f799-47f1-bbf9-67bd36086a65","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc348acf-f595-97e0-838b-b3c4c871bae8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:49094","PortSpecifier":{"PortValue":49094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc348acf-f595-97e0-838b-b3c4c871bae8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc348acf-f595-97e0-838b-b3c4c871bae8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:49094","PortSpecifier":{"PortValue":49094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704696,"nanos":740440068},"http":{"id":"bc348acf-f595-97e0-838b-b3c4c871bae8","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bc348acf-f595-97e0-838b-b3c4c871bae8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc348acf-f595-97e0-838b-b3c4c871bae8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc348acf-f595-97e0-838b-b3c4c871bae8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.135.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc348acf-f595-97e0-838b-b3c4c871bae8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc348acf-f595-97e0-838b-b3c4c871bae8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc348acf-f595-97e0-838b-b3c4c871bae8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/auth-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc348acf-f595-97e0-838b-b3c4c871bae8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc348acf-f595-97e0-838b-b3c4c871bae8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc348acf-f595-97e0-838b-b3c4c871bae8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc348acf-f595-97e0-838b-b3c4c871bae8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc348acf-f595-97e0-838b-b3c4c871bae8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d15c3995-9daf-48b3-918f-28da54df27d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58662","PortSpecifier":{"PortValue":58662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d15c3995-9daf-48b3-918f-28da54df27d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d15c3995-9daf-48b3-918f-28da54df27d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58662","PortSpecifier":{"PortValue":58662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704696,"nanos":777372776},"http":{"id":"d15c3995-9daf-48b3-918f-28da54df27d2","method":"POST","headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d15c3995-9daf-48b3-918f-28da54df27d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d15c3995-9daf-48b3-918f-28da54df27d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d15c3995-9daf-48b3-918f-28da54df27d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d15c3995-9daf-48b3-918f-28da54df27d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d15c3995-9daf-48b3-918f-28da54df27d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d15c3995-9daf-48b3-918f-28da54df27d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2482f8/auth-test-model-2482f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d15c3995-9daf-48b3-918f-28da54df27d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d15c3995-9daf-48b3-918f-28da54df27d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d15c3995-9daf-48b3-918f-28da54df27d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d15c3995-9daf-48b3-918f-28da54df27d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d15c3995-9daf-48b3-918f-28da54df27d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f29888ed-c4cf-4e20-9d2e-884131802ad5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58664","PortSpecifier":{"PortValue":58664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f29888ed-c4cf-4e20-9d2e-884131802ad5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f29888ed-c4cf-4e20-9d2e-884131802ad5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58664","PortSpecifier":{"PortValue":58664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704696,"nanos":815768977},"http":{"id":"f29888ed-c4cf-4e20-9d2e-884131802ad5","method":"GET","headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f29888ed-c4cf-4e20-9d2e-884131802ad5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JGZVI2t0zxajCU9e_j1dOZ7whe3gEwqYXYjAeuLyuBIhvtxmleBjl1zcq7QB"}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f29888ed-c4cf-4e20-9d2e-884131802ad5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2482f8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JGZVI2t0zxajCU9e_j1dOZ7whe3gEwqYXYjAeuLyuBIhvtxmleBjl1zcq7QB\"}"}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f29888ed-c4cf-4e20-9d2e-884131802ad5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2482f8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f29888ed-c4cf-4e20-9d2e-884131802ad5","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f29888ed-c4cf-4e20-9d2e-884131802ad5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"f29888ed-c4cf-4e20-9d2e-884131802ad5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f29888ed-c4cf-4e20-9d2e-884131802ad5","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-10T17:31:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f29888ed-c4cf-4e20-9d2e-884131802ad5","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a19fa78f-3754-4934-84af-ce0f58906d6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:48550","PortSpecifier":{"PortValue":48550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a19fa78f-3754-4934-84af-ce0f58906d6e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a19fa78f-3754-4934-84af-ce0f58906d6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:48550","PortSpecifier":{"PortValue":48550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704714,"nanos":58253522},"http":{"id":"a19fa78f-3754-4934-84af-ce0f58906d6e","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a19fa78f-3754-4934-84af-ce0f58906d6e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a19fa78f-3754-4934-84af-ce0f58906d6e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a19fa78f-3754-4934-84af-ce0f58906d6e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.135.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a19fa78f-3754-4934-84af-ce0f58906d6e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a19fa78f-3754-4934-84af-ce0f58906d6e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a19fa78f-3754-4934-84af-ce0f58906d6e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/auth-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a19fa78f-3754-4934-84af-ce0f58906d6e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a19fa78f-3754-4934-84af-ce0f58906d6e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a19fa78f-3754-4934-84af-ce0f58906d6e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a19fa78f-3754-4934-84af-ce0f58906d6e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a19fa78f-3754-4934-84af-ce0f58906d6e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb2b5fcc-1ed6-4b02-9fe3-5aa22c63c2b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41842","PortSpecifier":{"PortValue":41842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb2b5fcc-1ed6-4b02-9fe3-5aa22c63c2b3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb2b5fcc-1ed6-4b02-9fe3-5aa22c63c2b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41842","PortSpecifier":{"PortValue":41842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704714,"nanos":89564864},"http":{"id":"eb2b5fcc-1ed6-4b02-9fe3-5aa22c63c2b3","method":"POST","headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb2b5fcc-1ed6-4b02-9fe3-5aa22c63c2b3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb2b5fcc-1ed6-4b02-9fe3-5aa22c63c2b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb2b5fcc-1ed6-4b02-9fe3-5aa22c63c2b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb2b5fcc-1ed6-4b02-9fe3-5aa22c63c2b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb2b5fcc-1ed6-4b02-9fe3-5aa22c63c2b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb2b5fcc-1ed6-4b02-9fe3-5aa22c63c2b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2482f8/auth-test-model-2482f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb2b5fcc-1ed6-4b02-9fe3-5aa22c63c2b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb2b5fcc-1ed6-4b02-9fe3-5aa22c63c2b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb2b5fcc-1ed6-4b02-9fe3-5aa22c63c2b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb2b5fcc-1ed6-4b02-9fe3-5aa22c63c2b3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb2b5fcc-1ed6-4b02-9fe3-5aa22c63c2b3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0235cfa-2e90-4c27-a90e-e4c676f8fa37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:48564","PortSpecifier":{"PortValue":48564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0235cfa-2e90-4c27-a90e-e4c676f8fa37","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0235cfa-2e90-4c27-a90e-e4c676f8fa37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:48564","PortSpecifier":{"PortValue":48564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704714,"nanos":128537019},"http":{"id":"d0235cfa-2e90-4c27-a90e-e4c676f8fa37","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d0235cfa-2e90-4c27-a90e-e4c676f8fa37","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0235cfa-2e90-4c27-a90e-e4c676f8fa37","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0235cfa-2e90-4c27-a90e-e4c676f8fa37","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.135.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0235cfa-2e90-4c27-a90e-e4c676f8fa37","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0235cfa-2e90-4c27-a90e-e4c676f8fa37","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0235cfa-2e90-4c27-a90e-e4c676f8fa37","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/auth-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d0235cfa-2e90-4c27-a90e-e4c676f8fa37","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0235cfa-2e90-4c27-a90e-e4c676f8fa37","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0235cfa-2e90-4c27-a90e-e4c676f8fa37","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0235cfa-2e90-4c27-a90e-e4c676f8fa37","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0235cfa-2e90-4c27-a90e-e4c676f8fa37","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"902a9593-2095-404a-9861-4e9634e35f2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41858","PortSpecifier":{"PortValue":41858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"902a9593-2095-404a-9861-4e9634e35f2c","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"902a9593-2095-404a-9861-4e9634e35f2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41858","PortSpecifier":{"PortValue":41858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704714,"nanos":162409778},"http":{"id":"902a9593-2095-404a-9861-4e9634e35f2c","method":"POST","headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"902a9593-2095-404a-9861-4e9634e35f2c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"902a9593-2095-404a-9861-4e9634e35f2c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"902a9593-2095-404a-9861-4e9634e35f2c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"902a9593-2095-404a-9861-4e9634e35f2c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"902a9593-2095-404a-9861-4e9634e35f2c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"902a9593-2095-404a-9861-4e9634e35f2c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2482f8/auth-test-model-2482f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"902a9593-2095-404a-9861-4e9634e35f2c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"902a9593-2095-404a-9861-4e9634e35f2c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"902a9593-2095-404a-9861-4e9634e35f2c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"902a9593-2095-404a-9861-4e9634e35f2c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"902a9593-2095-404a-9861-4e9634e35f2c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"722289b3-0eb8-4942-8c84-30d13fd696a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35910","PortSpecifier":{"PortValue":35910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"722289b3-0eb8-4942-8c84-30d13fd696a1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"722289b3-0eb8-4942-8c84-30d13fd696a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35910","PortSpecifier":{"PortValue":35910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704731,"nanos":352336792},"http":{"id":"722289b3-0eb8-4942-8c84-30d13fd696a1","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"722289b3-0eb8-4942-8c84-30d13fd696a1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"722289b3-0eb8-4942-8c84-30d13fd696a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"722289b3-0eb8-4942-8c84-30d13fd696a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.135.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"722289b3-0eb8-4942-8c84-30d13fd696a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"722289b3-0eb8-4942-8c84-30d13fd696a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"722289b3-0eb8-4942-8c84-30d13fd696a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/auth-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"722289b3-0eb8-4942-8c84-30d13fd696a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"722289b3-0eb8-4942-8c84-30d13fd696a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"722289b3-0eb8-4942-8c84-30d13fd696a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"722289b3-0eb8-4942-8c84-30d13fd696a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"722289b3-0eb8-4942-8c84-30d13fd696a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29a85e15-82c9-4e1e-8e6f-c3873ddfbd23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:53486","PortSpecifier":{"PortValue":53486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29a85e15-82c9-4e1e-8e6f-c3873ddfbd23","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29a85e15-82c9-4e1e-8e6f-c3873ddfbd23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:53486","PortSpecifier":{"PortValue":53486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704731,"nanos":385840588},"http":{"id":"29a85e15-82c9-4e1e-8e6f-c3873ddfbd23","method":"POST","headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"29a85e15-82c9-4e1e-8e6f-c3873ddfbd23","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29a85e15-82c9-4e1e-8e6f-c3873ddfbd23","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29a85e15-82c9-4e1e-8e6f-c3873ddfbd23","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29a85e15-82c9-4e1e-8e6f-c3873ddfbd23","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29a85e15-82c9-4e1e-8e6f-c3873ddfbd23","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29a85e15-82c9-4e1e-8e6f-c3873ddfbd23","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2482f8/auth-test-model-2482f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"29a85e15-82c9-4e1e-8e6f-c3873ddfbd23","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29a85e15-82c9-4e1e-8e6f-c3873ddfbd23","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29a85e15-82c9-4e1e-8e6f-c3873ddfbd23","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29a85e15-82c9-4e1e-8e6f-c3873ddfbd23","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29a85e15-82c9-4e1e-8e6f-c3873ddfbd23","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59a0e70d-6692-4d11-bde5-8f6d4c82d992","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:53498","PortSpecifier":{"PortValue":53498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59a0e70d-6692-4d11-bde5-8f6d4c82d992","method":"GET","path":"/maas-api/v1/api-keys/f28ed446-e559-40bf-a770-9be83ee31810","host":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59a0e70d-6692-4d11-bde5-8f6d4c82d992","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:53498","PortSpecifier":{"PortValue":53498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704731,"nanos":417705104},"http":{"id":"59a0e70d-6692-4d11-bde5-8f6d4c82d992","method":"GET","headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f28ed446-e559-40bf-a770-9be83ee31810",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"59a0e70d-6692-4d11-bde5-8f6d4c82d992","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59a0e70d-6692-4d11-bde5-8f6d4c82d992","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59a0e70d-6692-4d11-bde5-8f6d4c82d992","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f28ed446-e559-40bf-a770-9be83ee31810",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59a0e70d-6692-4d11-bde5-8f6d4c82d992","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59a0e70d-6692-4d11-bde5-8f6d4c82d992","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59a0e70d-6692-4d11-bde5-8f6d4c82d992","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2482f8/auth-test-model-2482f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59a0e70d-6692-4d11-bde5-8f6d4c82d992","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59a0e70d-6692-4d11-bde5-8f6d4c82d992","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59a0e70d-6692-4d11-bde5-8f6d4c82d992","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59a0e70d-6692-4d11-bde5-8f6d4c82d992","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59a0e70d-6692-4d11-bde5-8f6d4c82d992","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81cff2e0-316e-45c3-a488-bf3e40f262d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35918","PortSpecifier":{"PortValue":35918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81cff2e0-316e-45c3-a488-bf3e40f262d5","method":"GET","path":"/maas-api/v1/api-keys/f28ed446-e559-40bf-a770-9be83ee31810","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81cff2e0-316e-45c3-a488-bf3e40f262d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35918","PortSpecifier":{"PortValue":35918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704731,"nanos":448450586},"http":{"id":"81cff2e0-316e-45c3-a488-bf3e40f262d5","method":"GET","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f28ed446-e559-40bf-a770-9be83ee31810",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"81cff2e0-316e-45c3-a488-bf3e40f262d5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81cff2e0-316e-45c3-a488-bf3e40f262d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81cff2e0-316e-45c3-a488-bf3e40f262d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.135.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f28ed446-e559-40bf-a770-9be83ee31810",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81cff2e0-316e-45c3-a488-bf3e40f262d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81cff2e0-316e-45c3-a488-bf3e40f262d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81cff2e0-316e-45c3-a488-bf3e40f262d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/auth-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"81cff2e0-316e-45c3-a488-bf3e40f262d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81cff2e0-316e-45c3-a488-bf3e40f262d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81cff2e0-316e-45c3-a488-bf3e40f262d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81cff2e0-316e-45c3-a488-bf3e40f262d5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81cff2e0-316e-45c3-a488-bf3e40f262d5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dfa04b7-d0d9-4659-bf9e-2b9f786edbc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57730","PortSpecifier":{"PortValue":57730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4dfa04b7-d0d9-4659-bf9e-2b9f786edbc8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dfa04b7-d0d9-4659-bf9e-2b9f786edbc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57730","PortSpecifier":{"PortValue":57730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704755,"nanos":905247013},"http":{"id":"4dfa04b7-d0d9-4659-bf9e-2b9f786edbc8","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4dfa04b7-d0d9-4659-bf9e-2b9f786edbc8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4dfa04b7-d0d9-4659-bf9e-2b9f786edbc8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4dfa04b7-d0d9-4659-bf9e-2b9f786edbc8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.135.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dfa04b7-d0d9-4659-bf9e-2b9f786edbc8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dfa04b7-d0d9-4659-bf9e-2b9f786edbc8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dfa04b7-d0d9-4659-bf9e-2b9f786edbc8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/auth-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4dfa04b7-d0d9-4659-bf9e-2b9f786edbc8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dfa04b7-d0d9-4659-bf9e-2b9f786edbc8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dfa04b7-d0d9-4659-bf9e-2b9f786edbc8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dfa04b7-d0d9-4659-bf9e-2b9f786edbc8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dfa04b7-d0d9-4659-bf9e-2b9f786edbc8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09d82a9c-33a7-4b8a-8601-ea34e138a6ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:42470","PortSpecifier":{"PortValue":42470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09d82a9c-33a7-4b8a-8601-ea34e138a6ad","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09d82a9c-33a7-4b8a-8601-ea34e138a6ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:42470","PortSpecifier":{"PortValue":42470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704755,"nanos":938900959},"http":{"id":"09d82a9c-33a7-4b8a-8601-ea34e138a6ad","method":"POST","headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09d82a9c-33a7-4b8a-8601-ea34e138a6ad","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09d82a9c-33a7-4b8a-8601-ea34e138a6ad","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09d82a9c-33a7-4b8a-8601-ea34e138a6ad","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09d82a9c-33a7-4b8a-8601-ea34e138a6ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09d82a9c-33a7-4b8a-8601-ea34e138a6ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09d82a9c-33a7-4b8a-8601-ea34e138a6ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2482f8/auth-test-model-2482f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09d82a9c-33a7-4b8a-8601-ea34e138a6ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09d82a9c-33a7-4b8a-8601-ea34e138a6ad","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09d82a9c-33a7-4b8a-8601-ea34e138a6ad","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09d82a9c-33a7-4b8a-8601-ea34e138a6ad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09d82a9c-33a7-4b8a-8601-ea34e138a6ad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cedf344-7ec4-4a68-a5ad-90833d00e770","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57740","PortSpecifier":{"PortValue":57740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cedf344-7ec4-4a68-a5ad-90833d00e770","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cedf344-7ec4-4a68-a5ad-90833d00e770","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57740","PortSpecifier":{"PortValue":57740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704755,"nanos":972363917},"http":{"id":"2cedf344-7ec4-4a68-a5ad-90833d00e770","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cedf344-7ec4-4a68-a5ad-90833d00e770","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZCHu0JFc07o7xAzi_5m0OdRW5HRNkveK11LYy4RgSAcu4KnwZmzD0vTihvls"}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cedf344-7ec4-4a68-a5ad-90833d00e770","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZCHu0JFc07o7xAzi_5m0OdRW5HRNkveK11LYy4RgSAcu4KnwZmzD0vTihvls\"}"}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cedf344-7ec4-4a68-a5ad-90833d00e770","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2b5de35a-1f9e-4dd4-b725-d741b3be866f","keyName":"e2e-auth-iso-a-cfe7d5","subscription":"e2e-auth-iso-f87fea","tenant":"e2e-shared-a-43091a","userId":"2b5de35a-1f9e-4dd4-b725-d741b3be866f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cedf344-7ec4-4a68-a5ad-90833d00e770","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cedf344-7ec4-4a68-a5ad-90833d00e770","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cedf344-7ec4-4a68-a5ad-90833d00e770","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cedf344-7ec4-4a68-a5ad-90833d00e770","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/auth-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cedf344-7ec4-4a68-a5ad-90833d00e770","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2cedf344-7ec4-4a68-a5ad-90833d00e770","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cedf344-7ec4-4a68-a5ad-90833d00e770","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f87fea"}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cedf344-7ec4-4a68-a5ad-90833d00e770","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cedf344-7ec4-4a68-a5ad-90833d00e770","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:32:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cedf344-7ec4-4a68-a5ad-90833d00e770","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2c34c0418b873779e7ff0920d800c15bc1db146aeac8ee13c8a8d7d153a0f6f"}
{"level":"info","ts":"2026-07-10T17:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24214122e68794e5e2b33a80f3ce15360e3c957c7360cc5f1bcd165ee3cd337a"}
{"level":"info","ts":"2026-07-10T17:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6df7e2acbb8dbc818d0f7c1938401c982df2ebf34c632085701575e041079466"}
{"level":"info","ts":"2026-07-10T17:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07e5a869299a7a58ea709dc7bcd5119ecc9ecfbf5182914dee175354e9798a40"}
{"level":"info","ts":"2026-07-10T17:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38699473e7202217de248c3ddc8616b630cefc20db33abc754ff448a835b80b1"}
{"level":"info","ts":"2026-07-10T17:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/763df3a69901ba48df8bcc4e806796225d0fbb5e811ab5567676dfdf8ede81f7"}
{"level":"info","ts":"2026-07-10T17:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0e649dffde060351c23aaff6133fd315fa841d1704ff7adc264138bbe1d59f6"}
{"level":"info","ts":"2026-07-10T17:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b3915ec0e3b6f7b144e4b81462460463ca6584f10ae1c8281850e2a1cf3c77b"}
{"level":"info","ts":"2026-07-10T17:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2cf3494cc8df0b90e211e9b893d5ae0a335d3e5eb60bfaa21b03b5ea25b1c88"}
{"level":"info","ts":"2026-07-10T17:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcca1921f88e2593676618cb939c4c02df8be352d3a30776bae9553b18b3a9d5"}
{"level":"info","ts":"2026-07-10T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09f844ffdfb93cf4004a864533fa7ccf8c7acc87bd0ac0a55da6aefe37927cee"}
{"level":"info","ts":"2026-07-10T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/563d50dca977fe95ac0abfbca862d8defcbc669c811a85c89ee49c86e05ee971"}
{"level":"info","ts":"2026-07-10T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd6873b6058393785a7f494d682543a0251b8c4ea9e9c427fdf4d23138c61385"}
{"level":"info","ts":"2026-07-10T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ff7d690210a03ac0e5045fa54ec5a728dc63453e8f2abfb6a6057924e413d70"}
{"level":"info","ts":"2026-07-10T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06f141d03138028f4b88a04ff271e008f04cf14be1ae09bb8ac39719c2b50854"}
{"level":"info","ts":"2026-07-10T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02e21d5c58165f75999b7289c44e4ae7a74148db55242925b36bd1d118d690bd"}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3"}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3"}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3"}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc"}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc"}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3"}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75ca55699470a2cd176382b0cf17aa76c658ae8672b685a402689b61539b2ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75ca55699470a2cd176382b0cf17aa76c658ae8672b685a402689b61539b2ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75ca55699470a2cd176382b0cf17aa76c658ae8672b685a402689b61539b2ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75ca55699470a2cd176382b0cf17aa76c658ae8672b685a402689b61539b2ddd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc"}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75ca55699470a2cd176382b0cf17aa76c658ae8672b685a402689b61539b2ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75ca55699470a2cd176382b0cf17aa76c658ae8672b685a402689b61539b2ddd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75ca55699470a2cd176382b0cf17aa76c658ae8672b685a402689b61539b2ddd"}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75ca55699470a2cd176382b0cf17aa76c658ae8672b685a402689b61539b2ddd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75ca55699470a2cd176382b0cf17aa76c658ae8672b685a402689b61539b2ddd"}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75ca55699470a2cd176382b0cf17aa76c658ae8672b685a402689b61539b2ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75ca55699470a2cd176382b0cf17aa76c658ae8672b685a402689b61539b2ddd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75ca55699470a2cd176382b0cf17aa76c658ae8672b685a402689b61539b2ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75ca55699470a2cd176382b0cf17aa76c658ae8672b685a402689b61539b2ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c"}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75ca55699470a2cd176382b0cf17aa76c658ae8672b685a402689b61539b2ddd"}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c"}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c"}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626"}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626"}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c"}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626"}
{"level":"debug","ts":"2026-07-10T17:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738"}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738"}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738"}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:32:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3"}
{"level":"info","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3"}
{"level":"debug","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3"}
{"level":"debug","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3"}
{"level":"info","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3"}
{"level":"debug","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3"}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3"}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3"}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3"}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3"}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a"}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a"}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a"}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a"}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a"}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a"}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0964001dcca873200fe975be7d027aacfbe5b56d0c7a8f813697c905885c67b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0964001dcca873200fe975be7d027aacfbe5b56d0c7a8f813697c905885c67b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0964001dcca873200fe975be7d027aacfbe5b56d0c7a8f813697c905885c67b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0964001dcca873200fe975be7d027aacfbe5b56d0c7a8f813697c905885c67b9"}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0964001dcca873200fe975be7d027aacfbe5b56d0c7a8f813697c905885c67b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0964001dcca873200fe975be7d027aacfbe5b56d0c7a8f813697c905885c67b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0964001dcca873200fe975be7d027aacfbe5b56d0c7a8f813697c905885c67b9"}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0964001dcca873200fe975be7d027aacfbe5b56d0c7a8f813697c905885c67b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0964001dcca873200fe975be7d027aacfbe5b56d0c7a8f813697c905885c67b9"}
{"level":"info","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a"}
{"level":"debug","ts":"2026-07-10T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0964001dcca873200fe975be7d027aacfbe5b56d0c7a8f813697c905885c67b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0964001dcca873200fe975be7d027aacfbe5b56d0c7a8f813697c905885c67b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0964001dcca873200fe975be7d027aacfbe5b56d0c7a8f813697c905885c67b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea"}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0964001dcca873200fe975be7d027aacfbe5b56d0c7a8f813697c905885c67b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0964001dcca873200fe975be7d027aacfbe5b56d0c7a8f813697c905885c67b9"}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea"}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e"}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9"}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e"}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9"}
{"level":"error","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e"}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9"}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e"}
{"level":"info","ts":"2026-07-10T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9"}
{"level":"debug","ts":"2026-07-10T17:33:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"}
{"level":"debug","ts":"2026-07-10T17:33:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"}
{"level":"debug","ts":"2026-07-10T17:33:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3"}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738"}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75ca55699470a2cd176382b0cf17aa76c658ae8672b685a402689b61539b2ddd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75ca55699470a2cd176382b0cf17aa76c658ae8672b685a402689b61539b2ddd"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e"}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626"}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9"}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc"}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6eb5d56da5fbe12d78027b2c1cd6009b5d639b0008b49d0ec2f29ff6b09468e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc"}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6eb5d56da5fbe12d78027b2c1cd6009b5d639b0008b49d0ec2f29ff6b09468e"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc"}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0964001dcca873200fe975be7d027aacfbe5b56d0c7a8f813697c905885c67b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc"}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0964001dcca873200fe975be7d027aacfbe5b56d0c7a8f813697c905885c67b9"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc"}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e983a2b2157d0b93a69af9e2d001764b879262c7a5aa9f52eeb5c7f11ac7b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e983a2b2157d0b93a69af9e2d001764b879262c7a5aa9f52eeb5c7f11ac7b8"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47b2c4f79ca63940fc465e6428a4a0e7ce8f8573eb63e10a8a2e1b0f261943ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47b2c4f79ca63940fc465e6428a4a0e7ce8f8573eb63e10a8a2e1b0f261943ba"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71daf5696fdd00801ee87fff095de5b8f878db4e30a48c4a29a1390bfc310225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71daf5696fdd00801ee87fff095de5b8f878db4e30a48c4a29a1390bfc310225"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71daf5696fdd00801ee87fff095de5b8f878db4e30a48c4a29a1390bfc310225","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71daf5696fdd00801ee87fff095de5b8f878db4e30a48c4a29a1390bfc310225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71daf5696fdd00801ee87fff095de5b8f878db4e30a48c4a29a1390bfc310225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71daf5696fdd00801ee87fff095de5b8f878db4e30a48c4a29a1390bfc310225","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ade9994949c9d255f1ca7bda3dee419c25585a1940111b5ac9f4b70e7974dd6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71daf5696fdd00801ee87fff095de5b8f878db4e30a48c4a29a1390bfc310225"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71daf5696fdd00801ee87fff095de5b8f878db4e30a48c4a29a1390bfc310225","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea"}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:33:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ade9994949c9d255f1ca7bda3dee419c25585a1940111b5ac9f4b70e7974dd6d"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71daf5696fdd00801ee87fff095de5b8f878db4e30a48c4a29a1390bfc310225"}
{"level":"info","ts":"2026-07-10T17:33:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea"}
{"level":"info","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bb24ca4-beaa-4c76-8a46-eb440c1841b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:52850","PortSpecifier":{"PortValue":52850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bb24ca4-beaa-4c76-8a46-eb440c1841b3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bb24ca4-beaa-4c76-8a46-eb440c1841b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:52850","PortSpecifier":{"PortValue":52850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704810,"nanos":553153710},"http":{"id":"0bb24ca4-beaa-4c76-8a46-eb440c1841b3","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0bb24ca4-beaa-4c76-8a46-eb440c1841b3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bb24ca4-beaa-4c76-8a46-eb440c1841b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bb24ca4-beaa-4c76-8a46-eb440c1841b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.135.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bb24ca4-beaa-4c76-8a46-eb440c1841b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bb24ca4-beaa-4c76-8a46-eb440c1841b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bb24ca4-beaa-4c76-8a46-eb440c1841b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/sub-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0bb24ca4-beaa-4c76-8a46-eb440c1841b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bb24ca4-beaa-4c76-8a46-eb440c1841b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bb24ca4-beaa-4c76-8a46-eb440c1841b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bb24ca4-beaa-4c76-8a46-eb440c1841b3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bb24ca4-beaa-4c76-8a46-eb440c1841b3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd24a9f7-c185-47e3-98d9-b6778d21f45e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35604","PortSpecifier":{"PortValue":35604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd24a9f7-c185-47e3-98d9-b6778d21f45e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd24a9f7-c185-47e3-98d9-b6778d21f45e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35604","PortSpecifier":{"PortValue":35604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704810,"nanos":587571479},"http":{"id":"fd24a9f7-c185-47e3-98d9-b6778d21f45e","method":"POST","headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd24a9f7-c185-47e3-98d9-b6778d21f45e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd24a9f7-c185-47e3-98d9-b6778d21f45e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd24a9f7-c185-47e3-98d9-b6778d21f45e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd24a9f7-c185-47e3-98d9-b6778d21f45e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd24a9f7-c185-47e3-98d9-b6778d21f45e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd24a9f7-c185-47e3-98d9-b6778d21f45e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2482f8/sub-test-model-2482f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd24a9f7-c185-47e3-98d9-b6778d21f45e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd24a9f7-c185-47e3-98d9-b6778d21f45e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd24a9f7-c185-47e3-98d9-b6778d21f45e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd24a9f7-c185-47e3-98d9-b6778d21f45e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd24a9f7-c185-47e3-98d9-b6778d21f45e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b193f98b-5fe5-4b94-a882-31cc8024d6e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:52860","PortSpecifier":{"PortValue":52860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b193f98b-5fe5-4b94-a882-31cc8024d6e1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b193f98b-5fe5-4b94-a882-31cc8024d6e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:52860","PortSpecifier":{"PortValue":52860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704810,"nanos":619122971},"http":{"id":"b193f98b-5fe5-4b94-a882-31cc8024d6e1","method":"GET","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b193f98b-5fe5-4b94-a882-31cc8024d6e1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JRUED2gfsRo7Lycv_8cktgW9TiTFumpvdEVgpyO94bqUTZfuul0XgVdlnTOl"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b193f98b-5fe5-4b94-a882-31cc8024d6e1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JRUED2gfsRo7Lycv_8cktgW9TiTFumpvdEVgpyO94bqUTZfuul0XgVdlnTOl\"}"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b193f98b-5fe5-4b94-a882-31cc8024d6e1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3aaae560-c3b4-4263-b91c-cbe415a288e2","keyName":"e2e-sub-iso-8163f0","subscription":"e2e-a-only-ef1eb6","tenant":"e2e-shared-a-43091a","userId":"3aaae560-c3b4-4263-b91c-cbe415a288e2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b193f98b-5fe5-4b94-a882-31cc8024d6e1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b193f98b-5fe5-4b94-a882-31cc8024d6e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b193f98b-5fe5-4b94-a882-31cc8024d6e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b193f98b-5fe5-4b94-a882-31cc8024d6e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/sub-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b193f98b-5fe5-4b94-a882-31cc8024d6e1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b193f98b-5fe5-4b94-a882-31cc8024d6e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b193f98b-5fe5-4b94-a882-31cc8024d6e1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-ef1eb6"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b193f98b-5fe5-4b94-a882-31cc8024d6e1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b193f98b-5fe5-4b94-a882-31cc8024d6e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b193f98b-5fe5-4b94-a882-31cc8024d6e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3c6e6fc-68bf-41f6-9cec-1796e77717c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35620","PortSpecifier":{"PortValue":35620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3c6e6fc-68bf-41f6-9cec-1796e77717c8","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3c6e6fc-68bf-41f6-9cec-1796e77717c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35620","PortSpecifier":{"PortValue":35620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704810,"nanos":646424239},"http":{"id":"f3c6e6fc-68bf-41f6-9cec-1796e77717c8","method":"GET","headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3c6e6fc-68bf-41f6-9cec-1796e77717c8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GCmSBLOQpSxtrkGj_smnccshZC5THVJlxos7h1qkLVGBOsLtQhR3KtvGIFh4"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f3c6e6fc-68bf-41f6-9cec-1796e77717c8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2482f8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GCmSBLOQpSxtrkGj_smnccshZC5THVJlxos7h1qkLVGBOsLtQhR3KtvGIFh4\"}"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f3c6e6fc-68bf-41f6-9cec-1796e77717c8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2482f8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7cd59a62-4e22-4ab7-bc87-4e175acf4331","keyName":"e2e-sub-iso-3d1293","subscription":"e2e-b-only-ef1eb6","tenant":"e2e-shared-b-2482f8","userId":"7cd59a62-4e22-4ab7-bc87-4e175acf4331","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3c6e6fc-68bf-41f6-9cec-1796e77717c8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3c6e6fc-68bf-41f6-9cec-1796e77717c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3c6e6fc-68bf-41f6-9cec-1796e77717c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3c6e6fc-68bf-41f6-9cec-1796e77717c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2482f8/sub-test-model-2482f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3c6e6fc-68bf-41f6-9cec-1796e77717c8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3c6e6fc-68bf-41f6-9cec-1796e77717c8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f3c6e6fc-68bf-41f6-9cec-1796e77717c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3c6e6fc-68bf-41f6-9cec-1796e77717c8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-ef1eb6"}
{"level":"info","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3c6e6fc-68bf-41f6-9cec-1796e77717c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3c6e6fc-68bf-41f6-9cec-1796e77717c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"721f6bfa-0a9d-4b9c-bff3-46cda5e195ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58924","PortSpecifier":{"PortValue":58924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"721f6bfa-0a9d-4b9c-bff3-46cda5e195ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"721f6bfa-0a9d-4b9c-bff3-46cda5e195ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58924","PortSpecifier":{"PortValue":58924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704829,"nanos":209511981},"http":{"id":"721f6bfa-0a9d-4b9c-bff3-46cda5e195ee","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"721f6bfa-0a9d-4b9c-bff3-46cda5e195ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"721f6bfa-0a9d-4b9c-bff3-46cda5e195ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"721f6bfa-0a9d-4b9c-bff3-46cda5e195ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.135.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"721f6bfa-0a9d-4b9c-bff3-46cda5e195ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"721f6bfa-0a9d-4b9c-bff3-46cda5e195ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"721f6bfa-0a9d-4b9c-bff3-46cda5e195ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/sub-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"721f6bfa-0a9d-4b9c-bff3-46cda5e195ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"721f6bfa-0a9d-4b9c-bff3-46cda5e195ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"721f6bfa-0a9d-4b9c-bff3-46cda5e195ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"721f6bfa-0a9d-4b9c-bff3-46cda5e195ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"721f6bfa-0a9d-4b9c-bff3-46cda5e195ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a36095d8-4445-4eb2-90af-39428a7e3120","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:59334","PortSpecifier":{"PortValue":59334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a36095d8-4445-4eb2-90af-39428a7e3120","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a36095d8-4445-4eb2-90af-39428a7e3120","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:59334","PortSpecifier":{"PortValue":59334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704829,"nanos":248298220},"http":{"id":"a36095d8-4445-4eb2-90af-39428a7e3120","method":"POST","headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a36095d8-4445-4eb2-90af-39428a7e3120","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a36095d8-4445-4eb2-90af-39428a7e3120","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a36095d8-4445-4eb2-90af-39428a7e3120","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a36095d8-4445-4eb2-90af-39428a7e3120","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a36095d8-4445-4eb2-90af-39428a7e3120","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a36095d8-4445-4eb2-90af-39428a7e3120","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2482f8/sub-test-model-2482f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a36095d8-4445-4eb2-90af-39428a7e3120","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a36095d8-4445-4eb2-90af-39428a7e3120","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a36095d8-4445-4eb2-90af-39428a7e3120","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a36095d8-4445-4eb2-90af-39428a7e3120","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a36095d8-4445-4eb2-90af-39428a7e3120","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a7d2d53-33be-46de-90c5-fb3f6e7737da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58940","PortSpecifier":{"PortValue":58940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a7d2d53-33be-46de-90c5-fb3f6e7737da","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a7d2d53-33be-46de-90c5-fb3f6e7737da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58940","PortSpecifier":{"PortValue":58940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704829,"nanos":278986013},"http":{"id":"6a7d2d53-33be-46de-90c5-fb3f6e7737da","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a7d2d53-33be-46de-90c5-fb3f6e7737da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dQ7R9RmNfnUW2Ww6_9esz7Nl83v9XdIo3sgbCP40yNVt8nb55PRqSPbKCKP6"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a7d2d53-33be-46de-90c5-fb3f6e7737da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dQ7R9RmNfnUW2Ww6_9esz7Nl83v9XdIo3sgbCP40yNVt8nb55PRqSPbKCKP6\"}"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a7d2d53-33be-46de-90c5-fb3f6e7737da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"eb75ddcd-8003-4e58-9312-2a7ee4fbef64","keyName":"e2e-sub-iso-a396ba","subscription":"e2e-shared-sub-24bde4","tenant":"e2e-shared-a-43091a","userId":"eb75ddcd-8003-4e58-9312-2a7ee4fbef64","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a7d2d53-33be-46de-90c5-fb3f6e7737da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a7d2d53-33be-46de-90c5-fb3f6e7737da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a7d2d53-33be-46de-90c5-fb3f6e7737da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a7d2d53-33be-46de-90c5-fb3f6e7737da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/sub-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a7d2d53-33be-46de-90c5-fb3f6e7737da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a7d2d53-33be-46de-90c5-fb3f6e7737da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a7d2d53-33be-46de-90c5-fb3f6e7737da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-24bde4"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a7d2d53-33be-46de-90c5-fb3f6e7737da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a7d2d53-33be-46de-90c5-fb3f6e7737da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a7d2d53-33be-46de-90c5-fb3f6e7737da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b188f461-cf54-46cd-9ee5-86b1f11a9dbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:59348","PortSpecifier":{"PortValue":59348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b188f461-cf54-46cd-9ee5-86b1f11a9dbc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b188f461-cf54-46cd-9ee5-86b1f11a9dbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:59348","PortSpecifier":{"PortValue":59348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704829,"nanos":306907650},"http":{"id":"b188f461-cf54-46cd-9ee5-86b1f11a9dbc","method":"POST","headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b188f461-cf54-46cd-9ee5-86b1f11a9dbc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wbJQDmaW2yAntuKy_FtP0R3TIkcIyFJDhYM3sfIRVvJaQWvUTJ2MtM2oPdMu"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b188f461-cf54-46cd-9ee5-86b1f11a9dbc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2482f8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wbJQDmaW2yAntuKy_FtP0R3TIkcIyFJDhYM3sfIRVvJaQWvUTJ2MtM2oPdMu\"}"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b188f461-cf54-46cd-9ee5-86b1f11a9dbc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2482f8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"23346173-3315-4b38-99e0-e123675a895c","keyName":"e2e-sub-iso-8f0d07","subscription":"e2e-shared-sub-24bde4","tenant":"e2e-shared-b-2482f8","userId":"23346173-3315-4b38-99e0-e123675a895c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b188f461-cf54-46cd-9ee5-86b1f11a9dbc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b188f461-cf54-46cd-9ee5-86b1f11a9dbc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b188f461-cf54-46cd-9ee5-86b1f11a9dbc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b188f461-cf54-46cd-9ee5-86b1f11a9dbc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2482f8/sub-test-model-2482f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b188f461-cf54-46cd-9ee5-86b1f11a9dbc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b188f461-cf54-46cd-9ee5-86b1f11a9dbc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b188f461-cf54-46cd-9ee5-86b1f11a9dbc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b188f461-cf54-46cd-9ee5-86b1f11a9dbc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-24bde4"}
{"level":"info","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b188f461-cf54-46cd-9ee5-86b1f11a9dbc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b188f461-cf54-46cd-9ee5-86b1f11a9dbc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4622e4fff4229e59c8967189e6816068c65a23b8bafc51dcb52f322e5f742f3"}
{"level":"info","ts":"2026-07-10T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77b3dd7517c42177923ff7aa9f75a7c4684b24d7901530021fe41198bc594b19"}
{"level":"info","ts":"2026-07-10T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0964001dcca873200fe975be7d027aacfbe5b56d0c7a8f813697c905885c67b9"}
{"level":"info","ts":"2026-07-10T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e75b8753ef64d382988c1d9a848ff8af13433845a4a930f2d53898e49e6a4b9c"}
{"level":"info","ts":"2026-07-10T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc8a918b5b255e182fd542355249037464efce1cdf47e642c89e2a08c85c0fea"}
{"level":"info","ts":"2026-07-10T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da46c39f73f3e7c83071b10ff4cdb82c3a83733d2691db078d9125bce35c475e"}
{"level":"info","ts":"2026-07-10T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/821cb20cc207825cbeb9351995c34540df3f2052eafbad6c07f09c7546835b4a"}
{"level":"info","ts":"2026-07-10T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a603cefe9a937a06600270911e8cead59e264e7bf1c4b230573a3c20bf6d482"}
{"level":"info","ts":"2026-07-10T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bfb572ae390d18f72e7156c83d6ff0dd89e3ec0990ea0c776f2470e05995626"}
{"level":"info","ts":"2026-07-10T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75ca55699470a2cd176382b0cf17aa76c658ae8672b685a402689b61539b2ddd"}
{"level":"info","ts":"2026-07-10T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bdbf60ba46683f6d6f37e39cf2231c75f47cbb96ad6405ce0eada2471e4fae9"}
{"level":"info","ts":"2026-07-10T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f890fab8e095a10a1bb3dee86ff8a8cc40c225fbc46dc43902623e210eed2738"}
{"level":"info","ts":"2026-07-10T17:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/618bc21f2fea5b059f8ab69a70be63e25f1add7719a0451fd04d808ebc4d4b98"}
{"level":"info","ts":"2026-07-10T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7eb6ed4e0bf1bb3cefb42ac112959ae7b4b63b24b2582857fe953cbd9782d2fc"}
{"level":"info","ts":"2026-07-10T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd421a0df3a8c350360aa9de7452b10ad2902bae06813f81576ae0c3b78bf321"}
{"level":"info","ts":"2026-07-10T17:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16fbf23d4a03eedbff80e66fbdf81d96600c4f3c3dd04c6074857c773912e6a3"}
{"level":"debug","ts":"2026-07-10T17:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"}
{"level":"error","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d"}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5ee4806a55a65beef2943071a96d4c9bee599ed766551941cf07fd676b49601","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5ee4806a55a65beef2943071a96d4c9bee599ed766551941cf07fd676b49601","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5ee4806a55a65beef2943071a96d4c9bee599ed766551941cf07fd676b49601","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5ee4806a55a65beef2943071a96d4c9bee599ed766551941cf07fd676b49601","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5ee4806a55a65beef2943071a96d4c9bee599ed766551941cf07fd676b49601","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5ee4806a55a65beef2943071a96d4c9bee599ed766551941cf07fd676b49601","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5ee4806a55a65beef2943071a96d4c9bee599ed766551941cf07fd676b49601"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5ee4806a55a65beef2943071a96d4c9bee599ed766551941cf07fd676b49601","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5ee4806a55a65beef2943071a96d4c9bee599ed766551941cf07fd676b49601"}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2dc633eff44e4d954402c190baae6aa64f94186381a56e865dc5d12e2c71ca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2dc633eff44e4d954402c190baae6aa64f94186381a56e865dc5d12e2c71ca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2dc633eff44e4d954402c190baae6aa64f94186381a56e865dc5d12e2c71ca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2dc633eff44e4d954402c190baae6aa64f94186381a56e865dc5d12e2c71ca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2dc633eff44e4d954402c190baae6aa64f94186381a56e865dc5d12e2c71ca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5ee4806a55a65beef2943071a96d4c9bee599ed766551941cf07fd676b49601","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5ee4806a55a65beef2943071a96d4c9bee599ed766551941cf07fd676b49601"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2dc633eff44e4d954402c190baae6aa64f94186381a56e865dc5d12e2c71ca7"}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5ee4806a55a65beef2943071a96d4c9bee599ed766551941cf07fd676b49601","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2dc633eff44e4d954402c190baae6aa64f94186381a56e865dc5d12e2c71ca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5ee4806a55a65beef2943071a96d4c9bee599ed766551941cf07fd676b49601","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2dc633eff44e4d954402c190baae6aa64f94186381a56e865dc5d12e2c71ca7"}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2dc633eff44e4d954402c190baae6aa64f94186381a56e865dc5d12e2c71ca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2dc633eff44e4d954402c190baae6aa64f94186381a56e865dc5d12e2c71ca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2dc633eff44e4d954402c190baae6aa64f94186381a56e865dc5d12e2c71ca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2dc633eff44e4d954402c190baae6aa64f94186381a56e865dc5d12e2c71ca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5ee4806a55a65beef2943071a96d4c9bee599ed766551941cf07fd676b49601"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d"}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935fee5d27f8ce6cbfe28e6c1a45c6b5c952db81ba5a9237d1a394ac495094fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935fee5d27f8ce6cbfe28e6c1a45c6b5c952db81ba5a9237d1a394ac495094fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935fee5d27f8ce6cbfe28e6c1a45c6b5c952db81ba5a9237d1a394ac495094fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935fee5d27f8ce6cbfe28e6c1a45c6b5c952db81ba5a9237d1a394ac495094fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2dc633eff44e4d954402c190baae6aa64f94186381a56e865dc5d12e2c71ca7"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935fee5d27f8ce6cbfe28e6c1a45c6b5c952db81ba5a9237d1a394ac495094fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935fee5d27f8ce6cbfe28e6c1a45c6b5c952db81ba5a9237d1a394ac495094fc"}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935fee5d27f8ce6cbfe28e6c1a45c6b5c952db81ba5a9237d1a394ac495094fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935fee5d27f8ce6cbfe28e6c1a45c6b5c952db81ba5a9237d1a394ac495094fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4"}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935fee5d27f8ce6cbfe28e6c1a45c6b5c952db81ba5a9237d1a394ac495094fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4"}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935fee5d27f8ce6cbfe28e6c1a45c6b5c952db81ba5a9237d1a394ac495094fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8"}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935fee5d27f8ce6cbfe28e6c1a45c6b5c952db81ba5a9237d1a394ac495094fc"}
{"level":"error","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4"}
{"level":"info","ts":"2026-07-10T17:34:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8"}
{"level":"debug","ts":"2026-07-10T17:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033"}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033"}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033"}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033"}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033"}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033"}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033"}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033"}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbbc3d2bb6056247eba35b5d6053c0c1882ce20bad6720719999a281d65e3ebb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbbc3d2bb6056247eba35b5d6053c0c1882ce20bad6720719999a281d65e3ebb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbbc3d2bb6056247eba35b5d6053c0c1882ce20bad6720719999a281d65e3ebb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbbc3d2bb6056247eba35b5d6053c0c1882ce20bad6720719999a281d65e3ebb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbbc3d2bb6056247eba35b5d6053c0c1882ce20bad6720719999a281d65e3ebb"}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbbc3d2bb6056247eba35b5d6053c0c1882ce20bad6720719999a281d65e3ebb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbbc3d2bb6056247eba35b5d6053c0c1882ce20bad6720719999a281d65e3ebb"}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbbc3d2bb6056247eba35b5d6053c0c1882ce20bad6720719999a281d65e3ebb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbbc3d2bb6056247eba35b5d6053c0c1882ce20bad6720719999a281d65e3ebb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbbc3d2bb6056247eba35b5d6053c0c1882ce20bad6720719999a281d65e3ebb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbbc3d2bb6056247eba35b5d6053c0c1882ce20bad6720719999a281d65e3ebb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbbc3d2bb6056247eba35b5d6053c0c1882ce20bad6720719999a281d65e3ebb"}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f"}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f"}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f617c301a35f247a248e9bbeaaf1830bfbaf0de97f826efce23450998d5c462a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f"}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f617c301a35f247a248e9bbeaaf1830bfbaf0de97f826efce23450998d5c462a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f617c301a35f247a248e9bbeaaf1830bfbaf0de97f826efce23450998d5c462a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f617c301a35f247a248e9bbeaaf1830bfbaf0de97f826efce23450998d5c462a"}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f617c301a35f247a248e9bbeaaf1830bfbaf0de97f826efce23450998d5c462a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f617c301a35f247a248e9bbeaaf1830bfbaf0de97f826efce23450998d5c462a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f617c301a35f247a248e9bbeaaf1830bfbaf0de97f826efce23450998d5c462a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f"}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f617c301a35f247a248e9bbeaaf1830bfbaf0de97f826efce23450998d5c462a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f617c301a35f247a248e9bbeaaf1830bfbaf0de97f826efce23450998d5c462a"}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f617c301a35f247a248e9bbeaaf1830bfbaf0de97f826efce23450998d5c462a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f"}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f617c301a35f247a248e9bbeaaf1830bfbaf0de97f826efce23450998d5c462a"}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f"}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f"}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f"}
{"level":"debug","ts":"2026-07-10T17:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5"}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5"}
{"level":"error","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"}
{"level":"error","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5"}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0358ecea6c811697db0319d175aeec27015dfe7b2adb0de8017c7385a96b6897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0358ecea6c811697db0319d175aeec27015dfe7b2adb0de8017c7385a96b6897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0358ecea6c811697db0319d175aeec27015dfe7b2adb0de8017c7385a96b6897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0358ecea6c811697db0319d175aeec27015dfe7b2adb0de8017c7385a96b6897"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0358ecea6c811697db0319d175aeec27015dfe7b2adb0de8017c7385a96b6897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0358ecea6c811697db0319d175aeec27015dfe7b2adb0de8017c7385a96b6897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0358ecea6c811697db0319d175aeec27015dfe7b2adb0de8017c7385a96b6897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0358ecea6c811697db0319d175aeec27015dfe7b2adb0de8017c7385a96b6897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0358ecea6c811697db0319d175aeec27015dfe7b2adb0de8017c7385a96b6897"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0358ecea6c811697db0319d175aeec27015dfe7b2adb0de8017c7385a96b6897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0358ecea6c811697db0319d175aeec27015dfe7b2adb0de8017c7385a96b6897"}
{"level":"error","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"}
{"level":"error","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737"}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737"}
{"level":"info","ts":"2026-07-10T17:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6eb5d56da5fbe12d78027b2c1cd6009b5d639b0008b49d0ec2f29ff6b09468e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6eb5d56da5fbe12d78027b2c1cd6009b5d639b0008b49d0ec2f29ff6b09468e"}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6eb5d56da5fbe12d78027b2c1cd6009b5d639b0008b49d0ec2f29ff6b09468e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6eb5d56da5fbe12d78027b2c1cd6009b5d639b0008b49d0ec2f29ff6b09468e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6eb5d56da5fbe12d78027b2c1cd6009b5d639b0008b49d0ec2f29ff6b09468e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6eb5d56da5fbe12d78027b2c1cd6009b5d639b0008b49d0ec2f29ff6b09468e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6eb5d56da5fbe12d78027b2c1cd6009b5d639b0008b49d0ec2f29ff6b09468e"}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6eb5d56da5fbe12d78027b2c1cd6009b5d639b0008b49d0ec2f29ff6b09468e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6eb5d56da5fbe12d78027b2c1cd6009b5d639b0008b49d0ec2f29ff6b09468e"}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0358ecea6c811697db0319d175aeec27015dfe7b2adb0de8017c7385a96b6897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0358ecea6c811697db0319d175aeec27015dfe7b2adb0de8017c7385a96b6897"}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:35:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71daf5696fdd00801ee87fff095de5b8f878db4e30a48c4a29a1390bfc310225","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71daf5696fdd00801ee87fff095de5b8f878db4e30a48c4a29a1390bfc310225"}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:35:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:35:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbbc3d2bb6056247eba35b5d6053c0c1882ce20bad6720719999a281d65e3ebb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:35:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:35:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbbc3d2bb6056247eba35b5d6053c0c1882ce20bad6720719999a281d65e3ebb"}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:35:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:35:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:35:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:35:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:35:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:35:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"}
{"level":"error","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935fee5d27f8ce6cbfe28e6c1a45c6b5c952db81ba5a9237d1a394ac495094fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8"}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47b2c4f79ca63940fc465e6428a4a0e7ce8f8573eb63e10a8a2e1b0f261943ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935fee5d27f8ce6cbfe28e6c1a45c6b5c952db81ba5a9237d1a394ac495094fc"}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d"}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47b2c4f79ca63940fc465e6428a4a0e7ce8f8573eb63e10a8a2e1b0f261943ba"}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033"}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e983a2b2157d0b93a69af9e2d001764b879262c7a5aa9f52eeb5c7f11ac7b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5ee4806a55a65beef2943071a96d4c9bee599ed766551941cf07fd676b49601","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f"}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e983a2b2157d0b93a69af9e2d001764b879262c7a5aa9f52eeb5c7f11ac7b8"}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5ee4806a55a65beef2943071a96d4c9bee599ed766551941cf07fd676b49601"}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T17:35:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T17:35:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f617c301a35f247a248e9bbeaaf1830bfbaf0de97f826efce23450998d5c462a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5"}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T17:35:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T17:35:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f617c301a35f247a248e9bbeaaf1830bfbaf0de97f826efce23450998d5c462a"}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5"}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2dc633eff44e4d954402c190baae6aa64f94186381a56e865dc5d12e2c71ca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4"}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ade9994949c9d255f1ca7bda3dee419c25585a1940111b5ac9f4b70e7974dd6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737"}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5"}
{"level":"debug","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2dc633eff44e4d954402c190baae6aa64f94186381a56e865dc5d12e2c71ca7"}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ade9994949c9d255f1ca7bda3dee419c25585a1940111b5ac9f4b70e7974dd6d"}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"}
{"level":"info","ts":"2026-07-10T17:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65"}
{"level":"info","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fd17ac9-82a4-4070-91ca-2aa5cff8d914","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54098","PortSpecifier":{"PortValue":54098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fd17ac9-82a4-4070-91ca-2aa5cff8d914","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fd17ac9-82a4-4070-91ca-2aa5cff8d914","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54098","PortSpecifier":{"PortValue":54098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704922,"nanos":813065979},"http":{"id":"8fd17ac9-82a4-4070-91ca-2aa5cff8d914","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8fd17ac9-82a4-4070-91ca-2aa5cff8d914","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fd17ac9-82a4-4070-91ca-2aa5cff8d914","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fd17ac9-82a4-4070-91ca-2aa5cff8d914","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.135.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fd17ac9-82a4-4070-91ca-2aa5cff8d914","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fd17ac9-82a4-4070-91ca-2aa5cff8d914","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fd17ac9-82a4-4070-91ca-2aa5cff8d914","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8fd17ac9-82a4-4070-91ca-2aa5cff8d914","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fd17ac9-82a4-4070-91ca-2aa5cff8d914","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fd17ac9-82a4-4070-91ca-2aa5cff8d914","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fd17ac9-82a4-4070-91ca-2aa5cff8d914","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fd17ac9-82a4-4070-91ca-2aa5cff8d914","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32c18181-fc8e-4238-a68c-31bc504b3b08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58744","PortSpecifier":{"PortValue":58744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32c18181-fc8e-4238-a68c-31bc504b3b08","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32c18181-fc8e-4238-a68c-31bc504b3b08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58744","PortSpecifier":{"PortValue":58744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704922,"nanos":851143945},"http":{"id":"32c18181-fc8e-4238-a68c-31bc504b3b08","method":"POST","headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"32c18181-fc8e-4238-a68c-31bc504b3b08","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32c18181-fc8e-4238-a68c-31bc504b3b08","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32c18181-fc8e-4238-a68c-31bc504b3b08","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32c18181-fc8e-4238-a68c-31bc504b3b08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32c18181-fc8e-4238-a68c-31bc504b3b08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32c18181-fc8e-4238-a68c-31bc504b3b08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2482f8/rate-test-model-2482f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32c18181-fc8e-4238-a68c-31bc504b3b08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32c18181-fc8e-4238-a68c-31bc504b3b08","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32c18181-fc8e-4238-a68c-31bc504b3b08","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32c18181-fc8e-4238-a68c-31bc504b3b08","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32c18181-fc8e-4238-a68c-31bc504b3b08","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54112","PortSpecifier":{"PortValue":54112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36e64904-9432-42bd-bc57-ee5c897058d3","method":"POST","path":"/ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a/v1/completions","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54112","PortSpecifier":{"PortValue":54112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704922,"nanos":886322051},"http":{"id":"36e64904-9432-42bd-bc57-ee5c897058d3","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NoW94GLypqYPaCCb_ZDyuuADud5lwvglBMxcgKEaORU8iCYNEtubyN1EKGUf"}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NoW94GLypqYPaCCb_ZDyuuADud5lwvglBMxcgKEaORU8iCYNEtubyN1EKGUf\"}"}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ad2b33b6-a3e8-479c-9a38-af541fbe9763","keyName":"e2e-rate-a-33e980","subscription":"e2e-rate-iso-a-33e980","tenant":"e2e-shared-a-43091a","userId":"ad2b33b6-a3e8-479c-9a38-af541fbe9763","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a\",\"requestedSubscription\":\"e2e-rate-iso-a-33e980\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-43091a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33e980","namespace":"ai-tenant-e2e-shared-a-43091a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-33e980"}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ad2b33b6-a3e8-479c-9a38-af541fbe9763","keyName":"e2e-rate-a-33e980","selected_subscription":"e2e-rate-iso-a-33e980","selected_subscription_key":"ai-tenant-e2e-shared-a-43091a/e2e-rate-iso-a-33e980@ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-43091a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33e980","namespace":"ai-tenant-e2e-shared-a-43091a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:35:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36e64904-9432-42bd-bc57-ee5c897058d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54128","PortSpecifier":{"PortValue":54128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62f00de0-1523-43bf-8b3a-048a29564e26","method":"POST","path":"/ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a/v1/completions","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54128","PortSpecifier":{"PortValue":54128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704923,"nanos":946638032},"http":{"id":"62f00de0-1523-43bf-8b3a-048a29564e26","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NoW94GLypqYPaCCb_ZDyuuADud5lwvglBMxcgKEaORU8iCYNEtubyN1EKGUf"}
{"level":"debug","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NoW94GLypqYPaCCb_ZDyuuADud5lwvglBMxcgKEaORU8iCYNEtubyN1EKGUf\"}"}
{"level":"debug","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ad2b33b6-a3e8-479c-9a38-af541fbe9763","keyName":"e2e-rate-a-33e980","subscription":"e2e-rate-iso-a-33e980","tenant":"e2e-shared-a-43091a","userId":"ad2b33b6-a3e8-479c-9a38-af541fbe9763","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a\",\"requestedSubscription\":\"e2e-rate-iso-a-33e980\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-43091a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33e980","namespace":"ai-tenant-e2e-shared-a-43091a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-33e980"}
{"level":"debug","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ad2b33b6-a3e8-479c-9a38-af541fbe9763","keyName":"e2e-rate-a-33e980","selected_subscription":"e2e-rate-iso-a-33e980","selected_subscription_key":"ai-tenant-e2e-shared-a-43091a/e2e-rate-iso-a-33e980@ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-43091a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33e980","namespace":"ai-tenant-e2e-shared-a-43091a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62f00de0-1523-43bf-8b3a-048a29564e26","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54144","PortSpecifier":{"PortValue":54144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","method":"POST","path":"/ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a/v1/completions","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54144","PortSpecifier":{"PortValue":54144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704924,"nanos":985785437},"http":{"id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NoW94GLypqYPaCCb_ZDyuuADud5lwvglBMxcgKEaORU8iCYNEtubyN1EKGUf"}
{"level":"debug","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NoW94GLypqYPaCCb_ZDyuuADud5lwvglBMxcgKEaORU8iCYNEtubyN1EKGUf\"}"}
{"level":"debug","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ad2b33b6-a3e8-479c-9a38-af541fbe9763","keyName":"e2e-rate-a-33e980","subscription":"e2e-rate-iso-a-33e980","tenant":"e2e-shared-a-43091a","userId":"ad2b33b6-a3e8-479c-9a38-af541fbe9763","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a\",\"requestedSubscription\":\"e2e-rate-iso-a-33e980\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-43091a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33e980","namespace":"ai-tenant-e2e-shared-a-43091a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-33e980"}
{"level":"debug","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ad2b33b6-a3e8-479c-9a38-af541fbe9763","keyName":"e2e-rate-a-33e980","selected_subscription":"e2e-rate-iso-a-33e980","selected_subscription_key":"ai-tenant-e2e-shared-a-43091a/e2e-rate-iso-a-33e980@ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-43091a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33e980","namespace":"ai-tenant-e2e-shared-a-43091a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b38f7fba-8de6-4d73-a01e-4811a7eadaae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:35:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72fd5035-be5d-44c2-b2fa-001b72d53500","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45582","PortSpecifier":{"PortValue":45582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72fd5035-be5d-44c2-b2fa-001b72d53500","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:35:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72fd5035-be5d-44c2-b2fa-001b72d53500","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45582","PortSpecifier":{"PortValue":45582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704937,"nanos":962435731},"http":{"id":"72fd5035-be5d-44c2-b2fa-001b72d53500","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72fd5035-be5d-44c2-b2fa-001b72d53500","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:35:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72fd5035-be5d-44c2-b2fa-001b72d53500","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:35:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72fd5035-be5d-44c2-b2fa-001b72d53500","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.135.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72fd5035-be5d-44c2-b2fa-001b72d53500","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72fd5035-be5d-44c2-b2fa-001b72d53500","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72fd5035-be5d-44c2-b2fa-001b72d53500","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72fd5035-be5d-44c2-b2fa-001b72d53500","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:35:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72fd5035-be5d-44c2-b2fa-001b72d53500","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:35:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72fd5035-be5d-44c2-b2fa-001b72d53500","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:35:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72fd5035-be5d-44c2-b2fa-001b72d53500","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:35:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72fd5035-be5d-44c2-b2fa-001b72d53500","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:35:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa5351ac-d8a7-440c-8db1-2b235c09b75b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43726","PortSpecifier":{"PortValue":43726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa5351ac-d8a7-440c-8db1-2b235c09b75b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:35:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa5351ac-d8a7-440c-8db1-2b235c09b75b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43726","PortSpecifier":{"PortValue":43726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704937,"nanos":998111702},"http":{"id":"fa5351ac-d8a7-440c-8db1-2b235c09b75b","method":"POST","headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa5351ac-d8a7-440c-8db1-2b235c09b75b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa5351ac-d8a7-440c-8db1-2b235c09b75b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"]}}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa5351ac-d8a7-440c-8db1-2b235c09b75b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3b68ea34c5a4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de878a7d-df95-4f08-81a2-85ac3d9135a0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0b8fc3bc-e62a-4140-921c-033ce7c7e160","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa5351ac-d8a7-440c-8db1-2b235c09b75b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa5351ac-d8a7-440c-8db1-2b235c09b75b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa5351ac-d8a7-440c-8db1-2b235c09b75b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2482f8/rate-test-model-2482f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa5351ac-d8a7-440c-8db1-2b235c09b75b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa5351ac-d8a7-440c-8db1-2b235c09b75b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa5351ac-d8a7-440c-8db1-2b235c09b75b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa5351ac-d8a7-440c-8db1-2b235c09b75b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa5351ac-d8a7-440c-8db1-2b235c09b75b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45594","PortSpecifier":{"PortValue":45594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","method":"POST","path":"/ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a/v1/completions","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45594","PortSpecifier":{"PortValue":45594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704938,"nanos":29840122},"http":{"id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1H0qppvpVk0DVuOXb_6TXog16d8770BxvJwKP1t1oDs59EqNN3woIh97WpJYq"}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1H0qppvpVk0DVuOXb_6TXog16d8770BxvJwKP1t1oDs59EqNN3woIh97WpJYq\"}"}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2425e339-4b24-4dd3-817d-96689d5b85f0","keyName":"e2e-rate-a-49e2c2","subscription":"e2e-rate-iso-a-49e2c2","tenant":"e2e-shared-a-43091a","userId":"2425e339-4b24-4dd3-817d-96689d5b85f0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a\",\"requestedSubscription\":\"e2e-rate-iso-a-49e2c2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-43091a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-49e2c2","namespace":"ai-tenant-e2e-shared-a-43091a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-49e2c2"}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2425e339-4b24-4dd3-817d-96689d5b85f0","keyName":"e2e-rate-a-49e2c2","selected_subscription":"e2e-rate-iso-a-49e2c2","selected_subscription_key":"ai-tenant-e2e-shared-a-43091a/e2e-rate-iso-a-49e2c2@ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-43091a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-49e2c2","namespace":"ai-tenant-e2e-shared-a-43091a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9708db40-d581-9a32-a4d1-6f0be79f2d22","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45610","PortSpecifier":{"PortValue":45610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","method":"POST","path":"/ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a/v1/completions","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45610","PortSpecifier":{"PortValue":45610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704939,"nanos":71389026},"http":{"id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1H0qppvpVk0DVuOXb_6TXog16d8770BxvJwKP1t1oDs59EqNN3woIh97WpJYq"}
{"level":"debug","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1H0qppvpVk0DVuOXb_6TXog16d8770BxvJwKP1t1oDs59EqNN3woIh97WpJYq\"}"}
{"level":"debug","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2425e339-4b24-4dd3-817d-96689d5b85f0","keyName":"e2e-rate-a-49e2c2","subscription":"e2e-rate-iso-a-49e2c2","tenant":"e2e-shared-a-43091a","userId":"2425e339-4b24-4dd3-817d-96689d5b85f0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a\",\"requestedSubscription\":\"e2e-rate-iso-a-49e2c2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-43091a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-49e2c2","namespace":"ai-tenant-e2e-shared-a-43091a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-49e2c2"}
{"level":"debug","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2425e339-4b24-4dd3-817d-96689d5b85f0","keyName":"e2e-rate-a-49e2c2","selected_subscription":"e2e-rate-iso-a-49e2c2","selected_subscription_key":"ai-tenant-e2e-shared-a-43091a/e2e-rate-iso-a-49e2c2@ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-43091a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-49e2c2","namespace":"ai-tenant-e2e-shared-a-43091a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:35:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64e0b0eb-b5ae-416e-b044-ae47b8bc3ca4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45618","PortSpecifier":{"PortValue":45618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fc44cce-5c39-4269-bab5-076dc67de27d","method":"POST","path":"/ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a/v1/completions","host":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45618","PortSpecifier":{"PortValue":45618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704940,"nanos":132445801},"http":{"id":"0fc44cce-5c39-4269-bab5-076dc67de27d","method":"POST","headers":{":authority":"e2e-shared-a-43091a.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1H0qppvpVk0DVuOXb_6TXog16d8770BxvJwKP1t1oDs59EqNN3woIh97WpJYq"}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1H0qppvpVk0DVuOXb_6TXog16d8770BxvJwKP1t1oDs59EqNN3woIh97WpJYq\"}"}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2425e339-4b24-4dd3-817d-96689d5b85f0","keyName":"e2e-rate-a-49e2c2","subscription":"e2e-rate-iso-a-49e2c2","tenant":"e2e-shared-a-43091a","userId":"2425e339-4b24-4dd3-817d-96689d5b85f0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a\",\"requestedSubscription\":\"e2e-rate-iso-a-49e2c2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-43091a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-43091a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-49e2c2","namespace":"ai-tenant-e2e-shared-a-43091a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-49e2c2"}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2425e339-4b24-4dd3-817d-96689d5b85f0","keyName":"e2e-rate-a-49e2c2","selected_subscription":"e2e-rate-iso-a-49e2c2","selected_subscription_key":"ai-tenant-e2e-shared-a-43091a/e2e-rate-iso-a-49e2c2@ai-tenant-e2e-shared-a-43091a/rate-test-model-43091a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-43091a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-49e2c2","namespace":"ai-tenant-e2e-shared-a-43091a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fc44cce-5c39-4269-bab5-076dc67de27d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43734","PortSpecifier":{"PortValue":43734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","method":"POST","path":"/ai-tenant-e2e-shared-b-2482f8/rate-test-model-2482f8/v1/completions","host":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43734","PortSpecifier":{"PortValue":43734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783704940,"nanos":167440643},"http":{"id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","method":"POST","headers":{":authority":"e2e-shared-b-2482f8.apps.92a7259e-66c1-4bbf-9b4b-3b68ea34c5a4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-2482f8/rate-test-model-2482f8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t5J62nsTAvuO5sN3_8wyRVFJrJztb9qnQEvNCQPqCMH5rtD01zgorDaxVOTD"}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2482f8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t5J62nsTAvuO5sN3_8wyRVFJrJztb9qnQEvNCQPqCMH5rtD01zgorDaxVOTD\"}"}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2482f8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2560566e-2aa5-4f82-a363-7c3b76e1d350","keyName":"e2e-rate-b-49e2c2","subscription":"e2e-rate-iso-b-49e2c2","tenant":"e2e-shared-b-2482f8","userId":"2560566e-2aa5-4f82-a363-7c3b76e1d350","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-2482f8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-2482f8/rate-test-model-2482f8\",\"requestedSubscription\":\"e2e-rate-iso-b-49e2c2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2482f8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2482f8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-49e2c2","namespace":"ai-tenant-e2e-shared-b-2482f8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2482f8/rate-test-model-2482f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-49e2c2"}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2560566e-2aa5-4f82-a363-7c3b76e1d350","keyName":"e2e-rate-b-49e2c2","selected_subscription":"e2e-rate-iso-b-49e2c2","selected_subscription_key":"ai-tenant-e2e-shared-b-2482f8/e2e-rate-iso-b-49e2c2@ai-tenant-e2e-shared-b-2482f8/rate-test-model-2482f8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2482f8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-49e2c2","namespace":"ai-tenant-e2e-shared-b-2482f8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T17:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c68eae25-5531-4340-925b-a8ed94ce1d2c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T17:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/915b0cb890bf7b7a695d6d2e2f5a22efdedd9cd71908f65ad73fe9310befa23f"}
{"level":"info","ts":"2026-07-10T17:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5ee4806a55a65beef2943071a96d4c9bee599ed766551941cf07fd676b49601"}
{"level":"info","ts":"2026-07-10T17:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbbc3d2bb6056247eba35b5d6053c0c1882ce20bad6720719999a281d65e3ebb"}
{"level":"info","ts":"2026-07-10T17:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8ee38f8e322003088b89264f3bff4add506adf90174716ab990bb6da891cbc8"}
{"level":"info","ts":"2026-07-10T17:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ec5dde4ffccd879a508d2db867803a85be38e1cd64f526952c1dbd469f67874"}
{"level":"info","ts":"2026-07-10T17:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/519574167c26156fa212c083d39c3c6c9ae946e1653e4efc61b0df67d0c00355"}
{"level":"info","ts":"2026-07-10T17:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f617c301a35f247a248e9bbeaaf1830bfbaf0de97f826efce23450998d5c462a"}
{"level":"info","ts":"2026-07-10T17:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c5170e8314d0f1617458899ad0fd0254c88c439cf7bb0b4484c6725e95853d5"}
{"level":"info","ts":"2026-07-10T17:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/935fee5d27f8ce6cbfe28e6c1a45c6b5c952db81ba5a9237d1a394ac495094fc"}
{"level":"info","ts":"2026-07-10T17:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34b3ba87c858de4a956fb0df966b751aefe937bc580634a84c2116d09c84b0e4"}
{"level":"info","ts":"2026-07-10T17:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2dc633eff44e4d954402c190baae6aa64f94186381a56e865dc5d12e2c71ca7"}
{"level":"info","ts":"2026-07-10T17:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec8f34ab0d9fee7390552236ba5518d07b6df93b083f45154028a5f3b3d34033"}
{"level":"info","ts":"2026-07-10T17:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b73837c7e4e2a291342f5081a5ce983e9dd935f6045eafecfc70afeb93d639b"}
{"level":"info","ts":"2026-07-10T17:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0358ecea6c811697db0319d175aeec27015dfe7b2adb0de8017c7385a96b6897"}
{"level":"info","ts":"2026-07-10T17:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/252f86644e034a89134d32ef42ab2ceb26184adb1112bfd88535f3b28e389737"}
{"level":"info","ts":"2026-07-10T17:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64e37b3d8322f017edf4fd8b02a04ff09d59bf2a82ba0c896eeeca1c8789332d"}
{"level":"info","ts":"2026-07-10T17:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ade9994949c9d255f1ca7bda3dee419c25585a1940111b5ac9f4b70e7974dd6d"}
{"level":"info","ts":"2026-07-10T17:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6eb5d56da5fbe12d78027b2c1cd6009b5d639b0008b49d0ec2f29ff6b09468e"}
{"level":"info","ts":"2026-07-10T17:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71daf5696fdd00801ee87fff095de5b8f878db4e30a48c4a29a1390bfc310225"}
{"level":"info","ts":"2026-07-10T17:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3685bcf6c5a8770bb395c05cf91e780eb79f748c11bf56f81ee8f76da4a1abd2"}
{"level":"info","ts":"2026-07-10T17:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97c45f3451289e628c1b37bf74584a92043a32df8b864bc3cf262f0c296310ae"}
{"level":"info","ts":"2026-07-10T17:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47b2c4f79ca63940fc465e6428a4a0e7ce8f8573eb63e10a8a2e1b0f261943ba"}
{"level":"info","ts":"2026-07-10T17:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75e983a2b2157d0b93a69af9e2d001764b879262c7a5aa9f52eeb5c7f11ac7b8"}
{"level":"info","ts":"2026-07-10T17:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87713ce74b299d562727f208ad92d6c158c7a2c2210f5ff99eccd06a50ff5f65"}