--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1667e07-b07d-4e97-8dbb-3b18d9706ce0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-2b5047.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"93d9a342-9a66-42d1-9f21-905b948d41d6","keyName":"e2e-tenant-inference-2b5047","subscription":"test-model-2b5047-sub","tenant":"e2e-inf-a-2b5047","userId":"93d9a342-9a66-42d1-9f21-905b948d41d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1667e07-b07d-4e97-8dbb-3b18d9706ce0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-2b5047.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-2b5047/test-model-2b5047\",\"requestedSubscription\":\"test-model-2b5047-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1667e07-b07d-4e97-8dbb-3b18d9706ce0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-2b5047.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-2b5047","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-2b5047-sub","namespace":"ai-tenant-e2e-inf-a-2b5047","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1667e07-b07d-4e97-8dbb-3b18d9706ce0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1667e07-b07d-4e97-8dbb-3b18d9706ce0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1667e07-b07d-4e97-8dbb-3b18d9706ce0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1667e07-b07d-4e97-8dbb-3b18d9706ce0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1667e07-b07d-4e97-8dbb-3b18d9706ce0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-2b5047/test-model-2b5047\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1667e07-b07d-4e97-8dbb-3b18d9706ce0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1667e07-b07d-4e97-8dbb-3b18d9706ce0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1667e07-b07d-4e97-8dbb-3b18d9706ce0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-2b5047-sub"}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1667e07-b07d-4e97-8dbb-3b18d9706ce0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"93d9a342-9a66-42d1-9f21-905b948d41d6","keyName":"e2e-tenant-inference-2b5047","selected_subscription":"test-model-2b5047-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-2b5047/test-model-2b5047-sub@ai-tenant-e2e-inf-a-2b5047/test-model-2b5047","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-2b5047","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-2b5047-sub","namespace":"ai-tenant-e2e-inf-a-2b5047","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1667e07-b07d-4e97-8dbb-3b18d9706ce0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1667e07-b07d-4e97-8dbb-3b18d9706ce0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eea2ee82-7969-4a56-b25e-cf478af45d68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59690","PortSpecifier":{"PortValue":59690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eea2ee82-7969-4a56-b25e-cf478af45d68","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-2b5047.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eea2ee82-7969-4a56-b25e-cf478af45d68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59690","PortSpecifier":{"PortValue":59690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036680,"nanos":469696583},"http":{"id":"eea2ee82-7969-4a56-b25e-cf478af45d68","method":"POST","headers":{":authority":"e2e-inf-a-2b5047.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eea2ee82-7969-4a56-b25e-cf478af45d68","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eea2ee82-7969-4a56-b25e-cf478af45d68","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eea2ee82-7969-4a56-b25e-cf478af45d68","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bead417ebd7247c041975b68947e7354ca3f23e327dbf783a4bd9adffe7e16ee"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-2b5047.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eea2ee82-7969-4a56-b25e-cf478af45d68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eea2ee82-7969-4a56-b25e-cf478af45d68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eea2ee82-7969-4a56-b25e-cf478af45d68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-2b5047/test-model-2b5047\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eea2ee82-7969-4a56-b25e-cf478af45d68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eea2ee82-7969-4a56-b25e-cf478af45d68","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eea2ee82-7969-4a56-b25e-cf478af45d68","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eea2ee82-7969-4a56-b25e-cf478af45d68","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eea2ee82-7969-4a56-b25e-cf478af45d68","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"037dc25b-0681-4847-91ba-539483f67e4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47688","PortSpecifier":{"PortValue":47688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"037dc25b-0681-4847-91ba-539483f67e4f","method":"POST","path":"/ai-tenant-e2e-inf-b-6edf51/test-model-6edf51/v1/chat/completions","host":"e2e-inf-b-6edf51.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"037dc25b-0681-4847-91ba-539483f67e4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47688","PortSpecifier":{"PortValue":47688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036680,"nanos":515981578},"http":{"id":"037dc25b-0681-4847-91ba-539483f67e4f","method":"POST","headers":{":authority":"e2e-inf-b-6edf51.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-6edf51/test-model-6edf51/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"037dc25b-0681-4847-91ba-539483f67e4f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YXIZAb8TGRKW57Kx_yVyLcUXrEydSpNFqGGaMOKVoYDhDMkslJEZtrJNmBAz"}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"037dc25b-0681-4847-91ba-539483f67e4f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-6edf51.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YXIZAb8TGRKW57Kx_yVyLcUXrEydSpNFqGGaMOKVoYDhDMkslJEZtrJNmBAz\"}"}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"037dc25b-0681-4847-91ba-539483f67e4f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-6edf51.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"037dc25b-0681-4847-91ba-539483f67e4f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-6edf51.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"037dc25b-0681-4847-91ba-539483f67e4f","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"648eefe5f9684049e664aae2953592508f459114e6a0a47faef8391ade6836c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-6edf51.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-6edf51/test-model-6edf51/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"037dc25b-0681-4847-91ba-539483f67e4f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"037dc25b-0681-4847-91ba-539483f67e4f","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-02T23:58:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"037dc25b-0681-4847-91ba-539483f67e4f","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa72749e37ef6565bcb7bcfd343fd39f6f99f3929783ee553e779bb4acf1a355"}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6756e983137b70ee9988ea44c4fcd620504f4803bef03d3d26152c28ce28381"}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fc3e44081873e8b7cd3c3ffef75cf958a03a325d88a1b36ea680d0edf4e52c3"}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0119a3aaeb08ff1a51b39f42830b3f5b9139a95414310dde137c20cd89868f9c"}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd1390c6b3376ef50d9b3a9ed164528c7b72080314c14ce6c5b6cb74e965ef73"}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bead417ebd7247c041975b68947e7354ca3f23e327dbf783a4bd9adffe7e16ee"}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08b779787524f366d5389f3367bf4141257a5a9f2c615b2a72bbecc081da5a5a"}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a58b33947a35fcb4d471a77dbb7b476887b5e757367e34ff17dffa96c46ed764"}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f657371f174e67c1c0bd55b75c3edf3820d85c9387873b2e41599e0582c97ea"}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0de0fdf1d16979ae5cb4d31a3ebf84d093da816dad99a22de4ac0f0901fd8a39"}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb3dd7a76ffe16aabc3a86ab7100d852237458bdeb8ef76475b321373dde9b83"}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58698053a3b196d460532a806c84359b0c4ec68643a3cd2563255f4cbc6242b1"}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2926ecf601535e4d07fed7777c5bd56ab53aa7bd4b754e4866a8de4bb3668c6"}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbc102340380f3cb71853824303a36036f2c23bdd3a4792fd85f42e433273775"}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85f6d30c75615bbcf66a7417e384c33ffaaf075ace2704328b4f4b27a7e8f6e6"}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a95590f2c15d4d30676bb4399621629746005c94248dc8e234743a10c5effb37"}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/648eefe5f9684049e664aae2953592508f459114e6a0a47faef8391ade6836c5"}
{"level":"info","ts":"2026-07-02T23:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78c50e8e860843d9751a752c26c5a24fc944b05790593c340cd9b75c348fd956"}
{"level":"info","ts":"2026-07-02T23:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02cbc90336938bb6a2d9eee98f67710f86e07e5d768831e43820871ab1f8e724"}
{"level":"info","ts":"2026-07-02T23:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e30f675b742b6e091ab96be17f951bd717a5bc5783eba1ed40d03a8c28a633a5"}
{"level":"debug","ts":"2026-07-02T23:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:59:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:59:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:59:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:59:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35"}
{"level":"info","ts":"2026-07-02T23:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:59:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:59:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T23:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35"}
{"level":"info","ts":"2026-07-02T23:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35"}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35"}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"debug","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"debug","ts":"2026-07-02T23:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:59:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:59:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"debug","ts":"2026-07-02T23:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dee0bf299a81ec6c612a39432e67af0c159e6b595f1cfd346bdd3f5884064a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dee0bf299a81ec6c612a39432e67af0c159e6b595f1cfd346bdd3f5884064a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dee0bf299a81ec6c612a39432e67af0c159e6b595f1cfd346bdd3f5884064a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dee0bf299a81ec6c612a39432e67af0c159e6b595f1cfd346bdd3f5884064a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dee0bf299a81ec6c612a39432e67af0c159e6b595f1cfd346bdd3f5884064a6"}
{"level":"debug","ts":"2026-07-02T23:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dee0bf299a81ec6c612a39432e67af0c159e6b595f1cfd346bdd3f5884064a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dee0bf299a81ec6c612a39432e67af0c159e6b595f1cfd346bdd3f5884064a6"}
{"level":"debug","ts":"2026-07-02T23:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dee0bf299a81ec6c612a39432e67af0c159e6b595f1cfd346bdd3f5884064a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dee0bf299a81ec6c612a39432e67af0c159e6b595f1cfd346bdd3f5884064a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dee0bf299a81ec6c612a39432e67af0c159e6b595f1cfd346bdd3f5884064a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dee0bf299a81ec6c612a39432e67af0c159e6b595f1cfd346bdd3f5884064a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dee0bf299a81ec6c612a39432e67af0c159e6b595f1cfd346bdd3f5884064a6"}
{"level":"debug","ts":"2026-07-02T23:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5955083853eb46dc1a5b1266a4198feb5b5ff2fdffd476a100c2cf9be64eb829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:59:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5955083853eb46dc1a5b1266a4198feb5b5ff2fdffd476a100c2cf9be64eb829","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5955083853eb46dc1a5b1266a4198feb5b5ff2fdffd476a100c2cf9be64eb829","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5955083853eb46dc1a5b1266a4198feb5b5ff2fdffd476a100c2cf9be64eb829","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5955083853eb46dc1a5b1266a4198feb5b5ff2fdffd476a100c2cf9be64eb829"}
{"level":"debug","ts":"2026-07-02T23:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5955083853eb46dc1a5b1266a4198feb5b5ff2fdffd476a100c2cf9be64eb829","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5955083853eb46dc1a5b1266a4198feb5b5ff2fdffd476a100c2cf9be64eb829"}
{"level":"debug","ts":"2026-07-02T23:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5955083853eb46dc1a5b1266a4198feb5b5ff2fdffd476a100c2cf9be64eb829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5955083853eb46dc1a5b1266a4198feb5b5ff2fdffd476a100c2cf9be64eb829"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5955083853eb46dc1a5b1266a4198feb5b5ff2fdffd476a100c2cf9be64eb829","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5955083853eb46dc1a5b1266a4198feb5b5ff2fdffd476a100c2cf9be64eb829","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5955083853eb46dc1a5b1266a4198feb5b5ff2fdffd476a100c2cf9be64eb829"}
{"level":"info","ts":"2026-07-02T23:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfbe69cd6213f16344e383aec020fd4a5d8daee833a5451858b1807d1c651b35"}
{"level":"info","ts":"2026-07-02T23:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87344129d74f5dbbb4aa2cdef97d0b94b6adf6b39a2a8499faf0a6f8668efb3f"}
{"level":"info","ts":"2026-07-02T23:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dee0bf299a81ec6c612a39432e67af0c159e6b595f1cfd346bdd3f5884064a6"}
{"level":"info","ts":"2026-07-02T23:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5955083853eb46dc1a5b1266a4198feb5b5ff2fdffd476a100c2cf9be64eb829"}
{"level":"debug","ts":"2026-07-03T00:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31"}
{"level":"debug","ts":"2026-07-03T00:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31"}
{"level":"debug","ts":"2026-07-03T00:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31"}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76"}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"486662a8a7d13dc579077b8edca42b542623c671c09776ba2dfd52f6074b5000","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/486662a8a7d13dc579077b8edca42b542623c671c09776ba2dfd52f6074b5000"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"486662a8a7d13dc579077b8edca42b542623c671c09776ba2dfd52f6074b5000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e90563c504b180e71a59227e4fe71efd864df4df02504ec2286d2c881157075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e90563c504b180e71a59227e4fe71efd864df4df02504ec2286d2c881157075"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e90563c504b180e71a59227e4fe71efd864df4df02504ec2286d2c881157075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"486662a8a7d13dc579077b8edca42b542623c671c09776ba2dfd52f6074b5000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/486662a8a7d13dc579077b8edca42b542623c671c09776ba2dfd52f6074b5000"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e90563c504b180e71a59227e4fe71efd864df4df02504ec2286d2c881157075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e90563c504b180e71a59227e4fe71efd864df4df02504ec2286d2c881157075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e90563c504b180e71a59227e4fe71efd864df4df02504ec2286d2c881157075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"486662a8a7d13dc579077b8edca42b542623c671c09776ba2dfd52f6074b5000","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["486662a8a7d13dc579077b8edca42b542623c671c09776ba2dfd52f6074b5000"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"486662a8a7d13dc579077b8edca42b542623c671c09776ba2dfd52f6074b5000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00889791944f6db28521941eb192d9a68e6ad859f27b69abf291385c8f8243e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e90563c504b180e71a59227e4fe71efd864df4df02504ec2286d2c881157075"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00889791944f6db28521941eb192d9a68e6ad859f27b69abf291385c8f8243e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00889791944f6db28521941eb192d9a68e6ad859f27b69abf291385c8f8243e1"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e90563c504b180e71a59227e4fe71efd864df4df02504ec2286d2c881157075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"486662a8a7d13dc579077b8edca42b542623c671c09776ba2dfd52f6074b5000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00889791944f6db28521941eb192d9a68e6ad859f27b69abf291385c8f8243e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00889791944f6db28521941eb192d9a68e6ad859f27b69abf291385c8f8243e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00889791944f6db28521941eb192d9a68e6ad859f27b69abf291385c8f8243e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00889791944f6db28521941eb192d9a68e6ad859f27b69abf291385c8f8243e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76"}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/486662a8a7d13dc579077b8edca42b542623c671c09776ba2dfd52f6074b5000"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e90563c504b180e71a59227e4fe71efd864df4df02504ec2286d2c881157075"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00889791944f6db28521941eb192d9a68e6ad859f27b69abf291385c8f8243e1"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000"}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000"}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000"}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000"}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000"}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000"}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49650c3090fecf53d8c333be3411de48adfbc1550eafb53513c02d28ad29e70d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49650c3090fecf53d8c333be3411de48adfbc1550eafb53513c02d28ad29e70d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49650c3090fecf53d8c333be3411de48adfbc1550eafb53513c02d28ad29e70d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49650c3090fecf53d8c333be3411de48adfbc1550eafb53513c02d28ad29e70d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49650c3090fecf53d8c333be3411de48adfbc1550eafb53513c02d28ad29e70d"}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49650c3090fecf53d8c333be3411de48adfbc1550eafb53513c02d28ad29e70d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49650c3090fecf53d8c333be3411de48adfbc1550eafb53513c02d28ad29e70d"}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49650c3090fecf53d8c333be3411de48adfbc1550eafb53513c02d28ad29e70d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49650c3090fecf53d8c333be3411de48adfbc1550eafb53513c02d28ad29e70d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49650c3090fecf53d8c333be3411de48adfbc1550eafb53513c02d28ad29e70d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49650c3090fecf53d8c333be3411de48adfbc1550eafb53513c02d28ad29e70d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8895fbe73fcfef8e3c09b039bfe37805c86afb08230227f4c01f15fb1406ae13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8895fbe73fcfef8e3c09b039bfe37805c86afb08230227f4c01f15fb1406ae13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aff702f6e8809e93e3fe4790026b73bc6bf9faf8130c43e64a7fb9fe392407b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aff702f6e8809e93e3fe4790026b73bc6bf9faf8130c43e64a7fb9fe392407b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8895fbe73fcfef8e3c09b039bfe37805c86afb08230227f4c01f15fb1406ae13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aff702f6e8809e93e3fe4790026b73bc6bf9faf8130c43e64a7fb9fe392407b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aff702f6e8809e93e3fe4790026b73bc6bf9faf8130c43e64a7fb9fe392407b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49650c3090fecf53d8c333be3411de48adfbc1550eafb53513c02d28ad29e70d"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8895fbe73fcfef8e3c09b039bfe37805c86afb08230227f4c01f15fb1406ae13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8895fbe73fcfef8e3c09b039bfe37805c86afb08230227f4c01f15fb1406ae13"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8895fbe73fcfef8e3c09b039bfe37805c86afb08230227f4c01f15fb1406ae13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aff702f6e8809e93e3fe4790026b73bc6bf9faf8130c43e64a7fb9fe392407b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aff702f6e8809e93e3fe4790026b73bc6bf9faf8130c43e64a7fb9fe392407b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8895fbe73fcfef8e3c09b039bfe37805c86afb08230227f4c01f15fb1406ae13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8895fbe73fcfef8e3c09b039bfe37805c86afb08230227f4c01f15fb1406ae13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aff702f6e8809e93e3fe4790026b73bc6bf9faf8130c43e64a7fb9fe392407b3"}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8895fbe73fcfef8e3c09b039bfe37805c86afb08230227f4c01f15fb1406ae13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aff702f6e8809e93e3fe4790026b73bc6bf9faf8130c43e64a7fb9fe392407b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aff702f6e8809e93e3fe4790026b73bc6bf9faf8130c43e64a7fb9fe392407b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aff702f6e8809e93e3fe4790026b73bc6bf9faf8130c43e64a7fb9fe392407b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8895fbe73fcfef8e3c09b039bfe37805c86afb08230227f4c01f15fb1406ae13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aff702f6e8809e93e3fe4790026b73bc6bf9faf8130c43e64a7fb9fe392407b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000"}
{"level":"debug","ts":"2026-07-03T00:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aff702f6e8809e93e3fe4790026b73bc6bf9faf8130c43e64a7fb9fe392407b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8895fbe73fcfef8e3c09b039bfe37805c86afb08230227f4c01f15fb1406ae13"}
{"level":"info","ts":"2026-07-03T00:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aff702f6e8809e93e3fe4790026b73bc6bf9faf8130c43e64a7fb9fe392407b3"}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecef9a26c00f18f78970752e450743bf470628f888f16d08b1e9dca5a500bb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecef9a26c00f18f78970752e450743bf470628f888f16d08b1e9dca5a500bb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecef9a26c00f18f78970752e450743bf470628f888f16d08b1e9dca5a500bb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecef9a26c00f18f78970752e450743bf470628f888f16d08b1e9dca5a500bb6d"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecef9a26c00f18f78970752e450743bf470628f888f16d08b1e9dca5a500bb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecef9a26c00f18f78970752e450743bf470628f888f16d08b1e9dca5a500bb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecef9a26c00f18f78970752e450743bf470628f888f16d08b1e9dca5a500bb6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecef9a26c00f18f78970752e450743bf470628f888f16d08b1e9dca5a500bb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecef9a26c00f18f78970752e450743bf470628f888f16d08b1e9dca5a500bb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecef9a26c00f18f78970752e450743bf470628f888f16d08b1e9dca5a500bb6d"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecef9a26c00f18f78970752e450743bf470628f888f16d08b1e9dca5a500bb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecef9a26c00f18f78970752e450743bf470628f888f16d08b1e9dca5a500bb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecef9a26c00f18f78970752e450743bf470628f888f16d08b1e9dca5a500bb6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecef9a26c00f18f78970752e450743bf470628f888f16d08b1e9dca5a500bb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecef9a26c00f18f78970752e450743bf470628f888f16d08b1e9dca5a500bb6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecef9a26c00f18f78970752e450743bf470628f888f16d08b1e9dca5a500bb6d"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9"}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9"}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4a2a66c1c3c3b026576f20d0a7eb6b1799f314e7324a22dd1d5d200514ad946","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4a2a66c1c3c3b026576f20d0a7eb6b1799f314e7324a22dd1d5d200514ad946","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9"}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"379545a88d47734addf2a40775cdd8c30f718e84e115ece9c23568f195dea412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4a2a66c1c3c3b026576f20d0a7eb6b1799f314e7324a22dd1d5d200514ad946"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"379545a88d47734addf2a40775cdd8c30f718e84e115ece9c23568f195dea412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4a2a66c1c3c3b026576f20d0a7eb6b1799f314e7324a22dd1d5d200514ad946","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4a2a66c1c3c3b026576f20d0a7eb6b1799f314e7324a22dd1d5d200514ad946"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4a2a66c1c3c3b026576f20d0a7eb6b1799f314e7324a22dd1d5d200514ad946","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"379545a88d47734addf2a40775cdd8c30f718e84e115ece9c23568f195dea412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/379545a88d47734addf2a40775cdd8c30f718e84e115ece9c23568f195dea412"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"379545a88d47734addf2a40775cdd8c30f718e84e115ece9c23568f195dea412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4a2a66c1c3c3b026576f20d0a7eb6b1799f314e7324a22dd1d5d200514ad946","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"379545a88d47734addf2a40775cdd8c30f718e84e115ece9c23568f195dea412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["379545a88d47734addf2a40775cdd8c30f718e84e115ece9c23568f195dea412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"379545a88d47734addf2a40775cdd8c30f718e84e115ece9c23568f195dea412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"379545a88d47734addf2a40775cdd8c30f718e84e115ece9c23568f195dea412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["379545a88d47734addf2a40775cdd8c30f718e84e115ece9c23568f195dea412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"379545a88d47734addf2a40775cdd8c30f718e84e115ece9c23568f195dea412","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"379545a88d47734addf2a40775cdd8c30f718e84e115ece9c23568f195dea412\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fca4b879347122263281df199528c3aa12fc1af7ac1ac7564e5de77b7f1e3c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fca4b879347122263281df199528c3aa12fc1af7ac1ac7564e5de77b7f1e3c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"379545a88d47734addf2a40775cdd8c30f718e84e115ece9c23568f195dea412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fca4b879347122263281df199528c3aa12fc1af7ac1ac7564e5de77b7f1e3c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fca4b879347122263281df199528c3aa12fc1af7ac1ac7564e5de77b7f1e3c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fca4b879347122263281df199528c3aa12fc1af7ac1ac7564e5de77b7f1e3c47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4a2a66c1c3c3b026576f20d0a7eb6b1799f314e7324a22dd1d5d200514ad946"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/379545a88d47734addf2a40775cdd8c30f718e84e115ece9c23568f195dea412"}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fca4b879347122263281df199528c3aa12fc1af7ac1ac7564e5de77b7f1e3c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fca4b879347122263281df199528c3aa12fc1af7ac1ac7564e5de77b7f1e3c47"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fca4b879347122263281df199528c3aa12fc1af7ac1ac7564e5de77b7f1e3c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fca4b879347122263281df199528c3aa12fc1af7ac1ac7564e5de77b7f1e3c47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fca4b879347122263281df199528c3aa12fc1af7ac1ac7564e5de77b7f1e3c47"}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fca4b879347122263281df199528c3aa12fc1af7ac1ac7564e5de77b7f1e3c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fca4b879347122263281df199528c3aa12fc1af7ac1ac7564e5de77b7f1e3c47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fca4b879347122263281df199528c3aa12fc1af7ac1ac7564e5de77b7f1e3c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fca4b879347122263281df199528c3aa12fc1af7ac1ac7564e5de77b7f1e3c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fca4b879347122263281df199528c3aa12fc1af7ac1ac7564e5de77b7f1e3c47"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe"}
{"level":"info","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe"}
{"level":"error","ts":"2026-07-03T00:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T00:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e741060-6722-4abc-b311-a1f8d18d77f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35602","PortSpecifier":{"PortValue":35602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e741060-6722-4abc-b311-a1f8d18d77f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e741060-6722-4abc-b311-a1f8d18d77f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35602","PortSpecifier":{"PortValue":35602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036882,"nanos":704152810},"http":{"id":"3e741060-6722-4abc-b311-a1f8d18d77f1","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e741060-6722-4abc-b311-a1f8d18d77f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e741060-6722-4abc-b311-a1f8d18d77f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e741060-6722-4abc-b311-a1f8d18d77f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e741060-6722-4abc-b311-a1f8d18d77f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e741060-6722-4abc-b311-a1f8d18d77f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e741060-6722-4abc-b311-a1f8d18d77f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/auth-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e741060-6722-4abc-b311-a1f8d18d77f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e741060-6722-4abc-b311-a1f8d18d77f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e741060-6722-4abc-b311-a1f8d18d77f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e741060-6722-4abc-b311-a1f8d18d77f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e741060-6722-4abc-b311-a1f8d18d77f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f85d8de-72d3-43f9-b511-55caed800185","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49474","PortSpecifier":{"PortValue":49474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f85d8de-72d3-43f9-b511-55caed800185","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f85d8de-72d3-43f9-b511-55caed800185","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49474","PortSpecifier":{"PortValue":49474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036882,"nanos":764669115},"http":{"id":"3f85d8de-72d3-43f9-b511-55caed800185","method":"POST","headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f85d8de-72d3-43f9-b511-55caed800185","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f85d8de-72d3-43f9-b511-55caed800185","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f85d8de-72d3-43f9-b511-55caed800185","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f85d8de-72d3-43f9-b511-55caed800185","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f85d8de-72d3-43f9-b511-55caed800185","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f85d8de-72d3-43f9-b511-55caed800185","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c04a64/auth-test-model-c04a64\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f85d8de-72d3-43f9-b511-55caed800185","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f85d8de-72d3-43f9-b511-55caed800185","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f85d8de-72d3-43f9-b511-55caed800185","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f85d8de-72d3-43f9-b511-55caed800185","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f85d8de-72d3-43f9-b511-55caed800185","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f31d341-0303-4e54-a9dd-dca26822e4de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35608","PortSpecifier":{"PortValue":35608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f31d341-0303-4e54-a9dd-dca26822e4de","method":"GET","path":"/maas-api/v1/api-keys/4d5e8c51-da79-42d5-8597-aabc75c27966","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f31d341-0303-4e54-a9dd-dca26822e4de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35608","PortSpecifier":{"PortValue":35608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036882,"nanos":839834995},"http":{"id":"3f31d341-0303-4e54-a9dd-dca26822e4de","method":"GET","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4d5e8c51-da79-42d5-8597-aabc75c27966",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f31d341-0303-4e54-a9dd-dca26822e4de","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f31d341-0303-4e54-a9dd-dca26822e4de","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f31d341-0303-4e54-a9dd-dca26822e4de","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4d5e8c51-da79-42d5-8597-aabc75c27966",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f31d341-0303-4e54-a9dd-dca26822e4de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f31d341-0303-4e54-a9dd-dca26822e4de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f31d341-0303-4e54-a9dd-dca26822e4de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/auth-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f31d341-0303-4e54-a9dd-dca26822e4de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f31d341-0303-4e54-a9dd-dca26822e4de","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f31d341-0303-4e54-a9dd-dca26822e4de","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f31d341-0303-4e54-a9dd-dca26822e4de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f31d341-0303-4e54-a9dd-dca26822e4de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdbc25f1-60c8-4e82-b84c-7ce647ab7c18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49482","PortSpecifier":{"PortValue":49482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdbc25f1-60c8-4e82-b84c-7ce647ab7c18","method":"GET","path":"/maas-api/v1/api-keys/5802e2f6-dfda-4fd1-b34a-b6bf102f6deb","host":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdbc25f1-60c8-4e82-b84c-7ce647ab7c18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49482","PortSpecifier":{"PortValue":49482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036882,"nanos":876662367},"http":{"id":"bdbc25f1-60c8-4e82-b84c-7ce647ab7c18","method":"GET","headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5802e2f6-dfda-4fd1-b34a-b6bf102f6deb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bdbc25f1-60c8-4e82-b84c-7ce647ab7c18","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdbc25f1-60c8-4e82-b84c-7ce647ab7c18","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdbc25f1-60c8-4e82-b84c-7ce647ab7c18","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5802e2f6-dfda-4fd1-b34a-b6bf102f6deb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdbc25f1-60c8-4e82-b84c-7ce647ab7c18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdbc25f1-60c8-4e82-b84c-7ce647ab7c18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdbc25f1-60c8-4e82-b84c-7ce647ab7c18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c04a64/auth-test-model-c04a64\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bdbc25f1-60c8-4e82-b84c-7ce647ab7c18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdbc25f1-60c8-4e82-b84c-7ce647ab7c18","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdbc25f1-60c8-4e82-b84c-7ce647ab7c18","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdbc25f1-60c8-4e82-b84c-7ce647ab7c18","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdbc25f1-60c8-4e82-b84c-7ce647ab7c18","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4a9c09d-1b54-4035-a516-6a335248183c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58736","PortSpecifier":{"PortValue":58736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4a9c09d-1b54-4035-a516-6a335248183c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4a9c09d-1b54-4035-a516-6a335248183c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58736","PortSpecifier":{"PortValue":58736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036897,"nanos":868838797},"http":{"id":"f4a9c09d-1b54-4035-a516-6a335248183c","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4a9c09d-1b54-4035-a516-6a335248183c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4a9c09d-1b54-4035-a516-6a335248183c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4a9c09d-1b54-4035-a516-6a335248183c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4a9c09d-1b54-4035-a516-6a335248183c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4a9c09d-1b54-4035-a516-6a335248183c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4a9c09d-1b54-4035-a516-6a335248183c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/auth-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4a9c09d-1b54-4035-a516-6a335248183c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4a9c09d-1b54-4035-a516-6a335248183c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4a9c09d-1b54-4035-a516-6a335248183c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4a9c09d-1b54-4035-a516-6a335248183c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4a9c09d-1b54-4035-a516-6a335248183c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"936674b7-23b8-4b44-a986-39bbb86d78e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51676","PortSpecifier":{"PortValue":51676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"936674b7-23b8-4b44-a986-39bbb86d78e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"936674b7-23b8-4b44-a986-39bbb86d78e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51676","PortSpecifier":{"PortValue":51676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036897,"nanos":909502601},"http":{"id":"936674b7-23b8-4b44-a986-39bbb86d78e1","method":"POST","headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"936674b7-23b8-4b44-a986-39bbb86d78e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"936674b7-23b8-4b44-a986-39bbb86d78e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"936674b7-23b8-4b44-a986-39bbb86d78e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"936674b7-23b8-4b44-a986-39bbb86d78e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"936674b7-23b8-4b44-a986-39bbb86d78e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"936674b7-23b8-4b44-a986-39bbb86d78e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c04a64/auth-test-model-c04a64\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"936674b7-23b8-4b44-a986-39bbb86d78e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"936674b7-23b8-4b44-a986-39bbb86d78e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"936674b7-23b8-4b44-a986-39bbb86d78e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"936674b7-23b8-4b44-a986-39bbb86d78e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"936674b7-23b8-4b44-a986-39bbb86d78e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db981021-0646-46ab-8c74-f939495abad6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58748","PortSpecifier":{"PortValue":58748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db981021-0646-46ab-8c74-f939495abad6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db981021-0646-46ab-8c74-f939495abad6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58748","PortSpecifier":{"PortValue":58748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036897,"nanos":969015419},"http":{"id":"db981021-0646-46ab-8c74-f939495abad6","method":"GET","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db981021-0646-46ab-8c74-f939495abad6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1am6NJkPx8nVVmXy0_7Cndpctolz57OCzW5BGKpEEjWq16YJVQgFX4HYxL3Je"}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db981021-0646-46ab-8c74-f939495abad6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1am6NJkPx8nVVmXy0_7Cndpctolz57OCzW5BGKpEEjWq16YJVQgFX4HYxL3Je\"}"}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db981021-0646-46ab-8c74-f939495abad6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b4e4256c-5b3f-40a7-b4cf-d7f132a31da9","keyName":"e2e-auth-iso-a-429637","subscription":"e2e-auth-iso-98c9dd","tenant":"e2e-shared-a-c1893b","userId":"b4e4256c-5b3f-40a7-b4cf-d7f132a31da9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db981021-0646-46ab-8c74-f939495abad6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db981021-0646-46ab-8c74-f939495abad6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db981021-0646-46ab-8c74-f939495abad6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db981021-0646-46ab-8c74-f939495abad6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/auth-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db981021-0646-46ab-8c74-f939495abad6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db981021-0646-46ab-8c74-f939495abad6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db981021-0646-46ab-8c74-f939495abad6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db981021-0646-46ab-8c74-f939495abad6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-98c9dd"}
{"level":"info","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db981021-0646-46ab-8c74-f939495abad6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:01:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db981021-0646-46ab-8c74-f939495abad6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02778feb-b0ac-9a82-a6e2-4d4e6e82e966","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54498","PortSpecifier":{"PortValue":54498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02778feb-b0ac-9a82-a6e2-4d4e6e82e966","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02778feb-b0ac-9a82-a6e2-4d4e6e82e966","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54498","PortSpecifier":{"PortValue":54498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036912,"nanos":950081133},"http":{"id":"02778feb-b0ac-9a82-a6e2-4d4e6e82e966","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"02778feb-b0ac-9a82-a6e2-4d4e6e82e966","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02778feb-b0ac-9a82-a6e2-4d4e6e82e966","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02778feb-b0ac-9a82-a6e2-4d4e6e82e966","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02778feb-b0ac-9a82-a6e2-4d4e6e82e966","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02778feb-b0ac-9a82-a6e2-4d4e6e82e966","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02778feb-b0ac-9a82-a6e2-4d4e6e82e966","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/auth-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"02778feb-b0ac-9a82-a6e2-4d4e6e82e966","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02778feb-b0ac-9a82-a6e2-4d4e6e82e966","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02778feb-b0ac-9a82-a6e2-4d4e6e82e966","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02778feb-b0ac-9a82-a6e2-4d4e6e82e966","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02778feb-b0ac-9a82-a6e2-4d4e6e82e966","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc15fb1c-1cbf-4beb-a948-1096bece9035","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35428","PortSpecifier":{"PortValue":35428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc15fb1c-1cbf-4beb-a948-1096bece9035","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc15fb1c-1cbf-4beb-a948-1096bece9035","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35428","PortSpecifier":{"PortValue":35428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036912,"nanos":990050051},"http":{"id":"cc15fb1c-1cbf-4beb-a948-1096bece9035","method":"POST","headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc15fb1c-1cbf-4beb-a948-1096bece9035","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc15fb1c-1cbf-4beb-a948-1096bece9035","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc15fb1c-1cbf-4beb-a948-1096bece9035","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc15fb1c-1cbf-4beb-a948-1096bece9035","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc15fb1c-1cbf-4beb-a948-1096bece9035","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc15fb1c-1cbf-4beb-a948-1096bece9035","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c04a64/auth-test-model-c04a64\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc15fb1c-1cbf-4beb-a948-1096bece9035","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:01:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc15fb1c-1cbf-4beb-a948-1096bece9035","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:01:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc15fb1c-1cbf-4beb-a948-1096bece9035","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T00:01:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc15fb1c-1cbf-4beb-a948-1096bece9035","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:01:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc15fb1c-1cbf-4beb-a948-1096bece9035","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:01:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bc9b69c-0e8b-42ea-8eea-bdc970b3c722","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35436","PortSpecifier":{"PortValue":35436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1bc9b69c-0e8b-42ea-8eea-bdc970b3c722","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:01:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bc9b69c-0e8b-42ea-8eea-bdc970b3c722","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35436","PortSpecifier":{"PortValue":35436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036913,"nanos":29442885},"http":{"id":"1bc9b69c-0e8b-42ea-8eea-bdc970b3c722","method":"GET","headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1bc9b69c-0e8b-42ea-8eea-bdc970b3c722","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16zVFvDF2tzOItj7X_JYqfYd3a112CzmfV7NwlgZP8Kc6nzILmPPzG10G1dfH"}
{"level":"debug","ts":"2026-07-03T00:01:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1bc9b69c-0e8b-42ea-8eea-bdc970b3c722","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c04a64.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16zVFvDF2tzOItj7X_JYqfYd3a112CzmfV7NwlgZP8Kc6nzILmPPzG10G1dfH\"}"}
{"level":"debug","ts":"2026-07-03T00:01:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1bc9b69c-0e8b-42ea-8eea-bdc970b3c722","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c04a64.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-03T00:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1bc9b69c-0e8b-42ea-8eea-bdc970b3c722","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bc9b69c-0e8b-42ea-8eea-bdc970b3c722","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"1bc9b69c-0e8b-42ea-8eea-bdc970b3c722","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-03T00:01:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bc9b69c-0e8b-42ea-8eea-bdc970b3c722","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-03T00:01:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bc9b69c-0e8b-42ea-8eea-bdc970b3c722","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4291f25-21fa-47b2-9bb0-78cf33f71e57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:42022","PortSpecifier":{"PortValue":42022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4291f25-21fa-47b2-9bb0-78cf33f71e57","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4291f25-21fa-47b2-9bb0-78cf33f71e57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:42022","PortSpecifier":{"PortValue":42022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036930,"nanos":138865718},"http":{"id":"f4291f25-21fa-47b2-9bb0-78cf33f71e57","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4291f25-21fa-47b2-9bb0-78cf33f71e57","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4291f25-21fa-47b2-9bb0-78cf33f71e57","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4291f25-21fa-47b2-9bb0-78cf33f71e57","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4291f25-21fa-47b2-9bb0-78cf33f71e57","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4291f25-21fa-47b2-9bb0-78cf33f71e57","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4291f25-21fa-47b2-9bb0-78cf33f71e57","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/auth-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4291f25-21fa-47b2-9bb0-78cf33f71e57","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4291f25-21fa-47b2-9bb0-78cf33f71e57","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4291f25-21fa-47b2-9bb0-78cf33f71e57","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4291f25-21fa-47b2-9bb0-78cf33f71e57","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4291f25-21fa-47b2-9bb0-78cf33f71e57","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c4d7494-55d5-477f-b655-65c557c18b8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35424","PortSpecifier":{"PortValue":35424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c4d7494-55d5-477f-b655-65c557c18b8d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c4d7494-55d5-477f-b655-65c557c18b8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35424","PortSpecifier":{"PortValue":35424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036930,"nanos":196908065},"http":{"id":"8c4d7494-55d5-477f-b655-65c557c18b8d","method":"POST","headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8c4d7494-55d5-477f-b655-65c557c18b8d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c4d7494-55d5-477f-b655-65c557c18b8d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c4d7494-55d5-477f-b655-65c557c18b8d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4d7494-55d5-477f-b655-65c557c18b8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4d7494-55d5-477f-b655-65c557c18b8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4d7494-55d5-477f-b655-65c557c18b8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c04a64/auth-test-model-c04a64\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c4d7494-55d5-477f-b655-65c557c18b8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4d7494-55d5-477f-b655-65c557c18b8d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4d7494-55d5-477f-b655-65c557c18b8d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c4d7494-55d5-477f-b655-65c557c18b8d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c4d7494-55d5-477f-b655-65c557c18b8d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78f78986-07b4-47e2-9c0b-4214699af8e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:42036","PortSpecifier":{"PortValue":42036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78f78986-07b4-47e2-9c0b-4214699af8e0","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78f78986-07b4-47e2-9c0b-4214699af8e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:42036","PortSpecifier":{"PortValue":42036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036930,"nanos":233821505},"http":{"id":"78f78986-07b4-47e2-9c0b-4214699af8e0","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78f78986-07b4-47e2-9c0b-4214699af8e0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78f78986-07b4-47e2-9c0b-4214699af8e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78f78986-07b4-47e2-9c0b-4214699af8e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78f78986-07b4-47e2-9c0b-4214699af8e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78f78986-07b4-47e2-9c0b-4214699af8e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78f78986-07b4-47e2-9c0b-4214699af8e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/auth-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78f78986-07b4-47e2-9c0b-4214699af8e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78f78986-07b4-47e2-9c0b-4214699af8e0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78f78986-07b4-47e2-9c0b-4214699af8e0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78f78986-07b4-47e2-9c0b-4214699af8e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78f78986-07b4-47e2-9c0b-4214699af8e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78d4e1ff-3d1d-433d-89bb-5b4a119fddfd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35426","PortSpecifier":{"PortValue":35426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78d4e1ff-3d1d-433d-89bb-5b4a119fddfd","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78d4e1ff-3d1d-433d-89bb-5b4a119fddfd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35426","PortSpecifier":{"PortValue":35426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036930,"nanos":290821039},"http":{"id":"78d4e1ff-3d1d-433d-89bb-5b4a119fddfd","method":"POST","headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78d4e1ff-3d1d-433d-89bb-5b4a119fddfd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78d4e1ff-3d1d-433d-89bb-5b4a119fddfd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78d4e1ff-3d1d-433d-89bb-5b4a119fddfd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78d4e1ff-3d1d-433d-89bb-5b4a119fddfd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78d4e1ff-3d1d-433d-89bb-5b4a119fddfd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78d4e1ff-3d1d-433d-89bb-5b4a119fddfd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c04a64/auth-test-model-c04a64\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78d4e1ff-3d1d-433d-89bb-5b4a119fddfd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78d4e1ff-3d1d-433d-89bb-5b4a119fddfd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78d4e1ff-3d1d-433d-89bb-5b4a119fddfd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78d4e1ff-3d1d-433d-89bb-5b4a119fddfd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:02:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78d4e1ff-3d1d-433d-89bb-5b4a119fddfd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93ec1a11-9205-4422-9431-809865a9416f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56258","PortSpecifier":{"PortValue":56258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93ec1a11-9205-4422-9431-809865a9416f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93ec1a11-9205-4422-9431-809865a9416f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56258","PortSpecifier":{"PortValue":56258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036947,"nanos":394438910},"http":{"id":"93ec1a11-9205-4422-9431-809865a9416f","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"93ec1a11-9205-4422-9431-809865a9416f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93ec1a11-9205-4422-9431-809865a9416f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93ec1a11-9205-4422-9431-809865a9416f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93ec1a11-9205-4422-9431-809865a9416f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93ec1a11-9205-4422-9431-809865a9416f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93ec1a11-9205-4422-9431-809865a9416f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/auth-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93ec1a11-9205-4422-9431-809865a9416f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93ec1a11-9205-4422-9431-809865a9416f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93ec1a11-9205-4422-9431-809865a9416f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93ec1a11-9205-4422-9431-809865a9416f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93ec1a11-9205-4422-9431-809865a9416f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65f361f0-b753-4790-988d-ffc83590044c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38974","PortSpecifier":{"PortValue":38974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65f361f0-b753-4790-988d-ffc83590044c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65f361f0-b753-4790-988d-ffc83590044c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38974","PortSpecifier":{"PortValue":38974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036947,"nanos":437361030},"http":{"id":"65f361f0-b753-4790-988d-ffc83590044c","method":"POST","headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"65f361f0-b753-4790-988d-ffc83590044c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65f361f0-b753-4790-988d-ffc83590044c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65f361f0-b753-4790-988d-ffc83590044c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65f361f0-b753-4790-988d-ffc83590044c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65f361f0-b753-4790-988d-ffc83590044c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65f361f0-b753-4790-988d-ffc83590044c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c04a64/auth-test-model-c04a64\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65f361f0-b753-4790-988d-ffc83590044c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65f361f0-b753-4790-988d-ffc83590044c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65f361f0-b753-4790-988d-ffc83590044c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65f361f0-b753-4790-988d-ffc83590044c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65f361f0-b753-4790-988d-ffc83590044c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a06fe839-abf5-469a-8efb-0108070605e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38988","PortSpecifier":{"PortValue":38988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a06fe839-abf5-469a-8efb-0108070605e4","method":"GET","path":"/maas-api/v1/api-keys/f507d908-fdfc-4274-9c4e-b122bd8c08dd","host":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a06fe839-abf5-469a-8efb-0108070605e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38988","PortSpecifier":{"PortValue":38988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036947,"nanos":479006674},"http":{"id":"a06fe839-abf5-469a-8efb-0108070605e4","method":"GET","headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f507d908-fdfc-4274-9c4e-b122bd8c08dd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a06fe839-abf5-469a-8efb-0108070605e4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a06fe839-abf5-469a-8efb-0108070605e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a06fe839-abf5-469a-8efb-0108070605e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f507d908-fdfc-4274-9c4e-b122bd8c08dd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a06fe839-abf5-469a-8efb-0108070605e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a06fe839-abf5-469a-8efb-0108070605e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a06fe839-abf5-469a-8efb-0108070605e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c04a64/auth-test-model-c04a64\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a06fe839-abf5-469a-8efb-0108070605e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a06fe839-abf5-469a-8efb-0108070605e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a06fe839-abf5-469a-8efb-0108070605e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a06fe839-abf5-469a-8efb-0108070605e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a06fe839-abf5-469a-8efb-0108070605e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba46b017-2529-453a-b4ac-e7f61018fa0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56262","PortSpecifier":{"PortValue":56262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba46b017-2529-453a-b4ac-e7f61018fa0f","method":"GET","path":"/maas-api/v1/api-keys/f507d908-fdfc-4274-9c4e-b122bd8c08dd","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba46b017-2529-453a-b4ac-e7f61018fa0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56262","PortSpecifier":{"PortValue":56262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036947,"nanos":517228092},"http":{"id":"ba46b017-2529-453a-b4ac-e7f61018fa0f","method":"GET","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f507d908-fdfc-4274-9c4e-b122bd8c08dd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba46b017-2529-453a-b4ac-e7f61018fa0f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba46b017-2529-453a-b4ac-e7f61018fa0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba46b017-2529-453a-b4ac-e7f61018fa0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f507d908-fdfc-4274-9c4e-b122bd8c08dd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba46b017-2529-453a-b4ac-e7f61018fa0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba46b017-2529-453a-b4ac-e7f61018fa0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba46b017-2529-453a-b4ac-e7f61018fa0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/auth-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba46b017-2529-453a-b4ac-e7f61018fa0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba46b017-2529-453a-b4ac-e7f61018fa0f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba46b017-2529-453a-b4ac-e7f61018fa0f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba46b017-2529-453a-b4ac-e7f61018fa0f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:02:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba46b017-2529-453a-b4ac-e7f61018fa0f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edb34d6b-a2dc-443d-b894-fd671606e139","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33668","PortSpecifier":{"PortValue":33668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"edb34d6b-a2dc-443d-b894-fd671606e139","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edb34d6b-a2dc-443d-b894-fd671606e139","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33668","PortSpecifier":{"PortValue":33668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036964,"nanos":633372800},"http":{"id":"edb34d6b-a2dc-443d-b894-fd671606e139","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"edb34d6b-a2dc-443d-b894-fd671606e139","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"edb34d6b-a2dc-443d-b894-fd671606e139","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"edb34d6b-a2dc-443d-b894-fd671606e139","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edb34d6b-a2dc-443d-b894-fd671606e139","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edb34d6b-a2dc-443d-b894-fd671606e139","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edb34d6b-a2dc-443d-b894-fd671606e139","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/auth-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"edb34d6b-a2dc-443d-b894-fd671606e139","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edb34d6b-a2dc-443d-b894-fd671606e139","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edb34d6b-a2dc-443d-b894-fd671606e139","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edb34d6b-a2dc-443d-b894-fd671606e139","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edb34d6b-a2dc-443d-b894-fd671606e139","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e2f8458-3950-4a51-b762-a2bff1271c91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56880","PortSpecifier":{"PortValue":56880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e2f8458-3950-4a51-b762-a2bff1271c91","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e2f8458-3950-4a51-b762-a2bff1271c91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56880","PortSpecifier":{"PortValue":56880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036964,"nanos":675121044},"http":{"id":"4e2f8458-3950-4a51-b762-a2bff1271c91","method":"POST","headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e2f8458-3950-4a51-b762-a2bff1271c91","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e2f8458-3950-4a51-b762-a2bff1271c91","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e2f8458-3950-4a51-b762-a2bff1271c91","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e2f8458-3950-4a51-b762-a2bff1271c91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e2f8458-3950-4a51-b762-a2bff1271c91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e2f8458-3950-4a51-b762-a2bff1271c91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c04a64/auth-test-model-c04a64\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e2f8458-3950-4a51-b762-a2bff1271c91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e2f8458-3950-4a51-b762-a2bff1271c91","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e2f8458-3950-4a51-b762-a2bff1271c91","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e2f8458-3950-4a51-b762-a2bff1271c91","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e2f8458-3950-4a51-b762-a2bff1271c91","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d9eceb1-3365-4651-8b66-5bff26dfa575","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33682","PortSpecifier":{"PortValue":33682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d9eceb1-3365-4651-8b66-5bff26dfa575","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d9eceb1-3365-4651-8b66-5bff26dfa575","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33682","PortSpecifier":{"PortValue":33682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036964,"nanos":712069468},"http":{"id":"0d9eceb1-3365-4651-8b66-5bff26dfa575","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d9eceb1-3365-4651-8b66-5bff26dfa575","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Oywwv1qFA4wf7RoD_DRWW30HU9OAry870Wcon88d3lwl2z3plRbwYkH1Whkd"}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d9eceb1-3365-4651-8b66-5bff26dfa575","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Oywwv1qFA4wf7RoD_DRWW30HU9OAry870Wcon88d3lwl2z3plRbwYkH1Whkd\"}"}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d9eceb1-3365-4651-8b66-5bff26dfa575","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"480b9583-0f04-47fa-ace8-4c607f6f7734","keyName":"e2e-auth-iso-a-1202d7","subscription":"e2e-auth-iso-b47c8d","tenant":"e2e-shared-a-c1893b","userId":"480b9583-0f04-47fa-ace8-4c607f6f7734","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d9eceb1-3365-4651-8b66-5bff26dfa575","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d9eceb1-3365-4651-8b66-5bff26dfa575","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d9eceb1-3365-4651-8b66-5bff26dfa575","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d9eceb1-3365-4651-8b66-5bff26dfa575","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/auth-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d9eceb1-3365-4651-8b66-5bff26dfa575","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d9eceb1-3365-4651-8b66-5bff26dfa575","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-b47c8d"}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d9eceb1-3365-4651-8b66-5bff26dfa575","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d9eceb1-3365-4651-8b66-5bff26dfa575","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d9eceb1-3365-4651-8b66-5bff26dfa575","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:02:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d9eceb1-3365-4651-8b66-5bff26dfa575","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bd7783d1e0db2864efbcf79678daed0ed429265f3271cfcea8377ad36b43be0"}
{"level":"info","ts":"2026-07-03T00:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aff702f6e8809e93e3fe4790026b73bc6bf9faf8130c43e64a7fb9fe392407b3"}
{"level":"info","ts":"2026-07-03T00:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49650c3090fecf53d8c333be3411de48adfbc1550eafb53513c02d28ad29e70d"}
{"level":"info","ts":"2026-07-03T00:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bef949d2a97223863fb16be6f3500fe1b6fe7fe57a80e1a890602e9481f9f8a"}
{"level":"info","ts":"2026-07-03T00:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fca4b879347122263281df199528c3aa12fc1af7ac1ac7564e5de77b7f1e3c47"}
{"level":"info","ts":"2026-07-03T00:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a101161aabc84d81b275b906eff032e1e158f6b0e01e1f0443d58dd2152a03a0"}
{"level":"info","ts":"2026-07-03T00:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00889791944f6db28521941eb192d9a68e6ad859f27b69abf291385c8f8243e1"}
{"level":"info","ts":"2026-07-03T00:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/faa45c6fa8e90646090832af7a7a0624dee26bc57b3a7de69535be72a1a8eba9"}
{"level":"info","ts":"2026-07-03T00:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/369ee378f392f3e4b8a6bd0c8ab92d34e0682fa0581cc08ed6c371d4141e6d76"}
{"level":"info","ts":"2026-07-03T00:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0378436bc2548f19aebf7b04249380d37740f872f81ad4ae9dd4ee8e03682000"}
{"level":"info","ts":"2026-07-03T00:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e90563c504b180e71a59227e4fe71efd864df4df02504ec2286d2c881157075"}
{"level":"info","ts":"2026-07-03T00:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4a2a66c1c3c3b026576f20d0a7eb6b1799f314e7324a22dd1d5d200514ad946"}
{"level":"info","ts":"2026-07-03T00:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/486662a8a7d13dc579077b8edca42b542623c671c09776ba2dfd52f6074b5000"}
{"level":"info","ts":"2026-07-03T00:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/379545a88d47734addf2a40775cdd8c30f718e84e115ece9c23568f195dea412"}
{"level":"info","ts":"2026-07-03T00:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecef9a26c00f18f78970752e450743bf470628f888f16d08b1e9dca5a500bb6d"}
{"level":"info","ts":"2026-07-03T00:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8895fbe73fcfef8e3c09b039bfe37805c86afb08230227f4c01f15fb1406ae13"}
{"level":"debug","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510"}
{"level":"debug","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510"}
{"level":"debug","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510"}
{"level":"debug","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510"}
{"level":"debug","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510"}
{"level":"debug","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510"}
{"level":"debug","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510"}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510"}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510"}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a9e9ee10de3351bf07f29566b6e2b7b1f9baa6ec78e6c77c860525f98044c6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516"}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a9e9ee10de3351bf07f29566b6e2b7b1f9baa6ec78e6c77c860525f98044c6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a9e9ee10de3351bf07f29566b6e2b7b1f9baa6ec78e6c77c860525f98044c6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a9e9ee10de3351bf07f29566b6e2b7b1f9baa6ec78e6c77c860525f98044c6c"}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a9e9ee10de3351bf07f29566b6e2b7b1f9baa6ec78e6c77c860525f98044c6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a9e9ee10de3351bf07f29566b6e2b7b1f9baa6ec78e6c77c860525f98044c6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a9e9ee10de3351bf07f29566b6e2b7b1f9baa6ec78e6c77c860525f98044c6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a9e9ee10de3351bf07f29566b6e2b7b1f9baa6ec78e6c77c860525f98044c6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a9e9ee10de3351bf07f29566b6e2b7b1f9baa6ec78e6c77c860525f98044c6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516"}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a9e9ee10de3351bf07f29566b6e2b7b1f9baa6ec78e6c77c860525f98044c6c"}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8374e423d2a650a998f347cf2c973100e50115b7ad9442e6fcf6f9e3b4c930","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516"}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8374e423d2a650a998f347cf2c973100e50115b7ad9442e6fcf6f9e3b4c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8374e423d2a650a998f347cf2c973100e50115b7ad9442e6fcf6f9e3b4c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8374e423d2a650a998f347cf2c973100e50115b7ad9442e6fcf6f9e3b4c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8374e423d2a650a998f347cf2c973100e50115b7ad9442e6fcf6f9e3b4c930","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8374e423d2a650a998f347cf2c973100e50115b7ad9442e6fcf6f9e3b4c930"}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8374e423d2a650a998f347cf2c973100e50115b7ad9442e6fcf6f9e3b4c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8374e423d2a650a998f347cf2c973100e50115b7ad9442e6fcf6f9e3b4c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8374e423d2a650a998f347cf2c973100e50115b7ad9442e6fcf6f9e3b4c930"}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8374e423d2a650a998f347cf2c973100e50115b7ad9442e6fcf6f9e3b4c930","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8374e423d2a650a998f347cf2c973100e50115b7ad9442e6fcf6f9e3b4c930"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8374e423d2a650a998f347cf2c973100e50115b7ad9442e6fcf6f9e3b4c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"668d2a34765fdca6659e73c88b4caf6abc590af45ca4c6194b29fdbd2a758ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"668d2a34765fdca6659e73c88b4caf6abc590af45ca4c6194b29fdbd2a758ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/668d2a34765fdca6659e73c88b4caf6abc590af45ca4c6194b29fdbd2a758ecc"}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8374e423d2a650a998f347cf2c973100e50115b7ad9442e6fcf6f9e3b4c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"668d2a34765fdca6659e73c88b4caf6abc590af45ca4c6194b29fdbd2a758ecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["668d2a34765fdca6659e73c88b4caf6abc590af45ca4c6194b29fdbd2a758ecc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"668d2a34765fdca6659e73c88b4caf6abc590af45ca4c6194b29fdbd2a758ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"668d2a34765fdca6659e73c88b4caf6abc590af45ca4c6194b29fdbd2a758ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8374e423d2a650a998f347cf2c973100e50115b7ad9442e6fcf6f9e3b4c930"}
{"level":"error","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/668d2a34765fdca6659e73c88b4caf6abc590af45ca4c6194b29fdbd2a758ecc"}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a642446d15fc8023e0de223f254a3d01fe69c20ca5ed090e94fd435608f5ab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a642446d15fc8023e0de223f254a3d01fe69c20ca5ed090e94fd435608f5ab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a642446d15fc8023e0de223f254a3d01fe69c20ca5ed090e94fd435608f5ab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a642446d15fc8023e0de223f254a3d01fe69c20ca5ed090e94fd435608f5ab0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a642446d15fc8023e0de223f254a3d01fe69c20ca5ed090e94fd435608f5ab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7"}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a642446d15fc8023e0de223f254a3d01fe69c20ca5ed090e94fd435608f5ab0"}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7"}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a642446d15fc8023e0de223f254a3d01fe69c20ca5ed090e94fd435608f5ab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a642446d15fc8023e0de223f254a3d01fe69c20ca5ed090e94fd435608f5ab0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a642446d15fc8023e0de223f254a3d01fe69c20ca5ed090e94fd435608f5ab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a642446d15fc8023e0de223f254a3d01fe69c20ca5ed090e94fd435608f5ab0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7"}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a642446d15fc8023e0de223f254a3d01fe69c20ca5ed090e94fd435608f5ab0"}
{"level":"info","ts":"2026-07-03T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7"}
{"level":"debug","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc"}
{"level":"debug","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc"}
{"level":"debug","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc"}
{"level":"debug","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3"}
{"level":"info","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3"}
{"level":"info","ts":"2026-07-03T00:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3"}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221c2909f9e7397361c52fbc51a8b001cfc9bce09a245c70fda566ca300377c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221c2909f9e7397361c52fbc51a8b001cfc9bce09a245c70fda566ca300377c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221c2909f9e7397361c52fbc51a8b001cfc9bce09a245c70fda566ca300377c7"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221c2909f9e7397361c52fbc51a8b001cfc9bce09a245c70fda566ca300377c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221c2909f9e7397361c52fbc51a8b001cfc9bce09a245c70fda566ca300377c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221c2909f9e7397361c52fbc51a8b001cfc9bce09a245c70fda566ca300377c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221c2909f9e7397361c52fbc51a8b001cfc9bce09a245c70fda566ca300377c7"}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221c2909f9e7397361c52fbc51a8b001cfc9bce09a245c70fda566ca300377c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["221c2909f9e7397361c52fbc51a8b001cfc9bce09a245c70fda566ca300377c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221c2909f9e7397361c52fbc51a8b001cfc9bce09a245c70fda566ca300377c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221c2909f9e7397361c52fbc51a8b001cfc9bce09a245c70fda566ca300377c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221c2909f9e7397361c52fbc51a8b001cfc9bce09a245c70fda566ca300377c7"}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db"}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db"}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db"}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db"}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"338a3eea933bbb3095c7aed86e6f97e63a607b3998cdfc24d80f102c02758786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"338a3eea933bbb3095c7aed86e6f97e63a607b3998cdfc24d80f102c02758786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"338a3eea933bbb3095c7aed86e6f97e63a607b3998cdfc24d80f102c02758786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/338a3eea933bbb3095c7aed86e6f97e63a607b3998cdfc24d80f102c02758786"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"338a3eea933bbb3095c7aed86e6f97e63a607b3998cdfc24d80f102c02758786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"338a3eea933bbb3095c7aed86e6f97e63a607b3998cdfc24d80f102c02758786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["338a3eea933bbb3095c7aed86e6f97e63a607b3998cdfc24d80f102c02758786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"338a3eea933bbb3095c7aed86e6f97e63a607b3998cdfc24d80f102c02758786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/338a3eea933bbb3095c7aed86e6f97e63a607b3998cdfc24d80f102c02758786"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"338a3eea933bbb3095c7aed86e6f97e63a607b3998cdfc24d80f102c02758786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/338a3eea933bbb3095c7aed86e6f97e63a607b3998cdfc24d80f102c02758786"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6216523c25c27cf8e2171bbaac79819d2e1982eaf20fa5aab4556b10809a2a5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6216523c25c27cf8e2171bbaac79819d2e1982eaf20fa5aab4556b10809a2a5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6216523c25c27cf8e2171bbaac79819d2e1982eaf20fa5aab4556b10809a2a5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6216523c25c27cf8e2171bbaac79819d2e1982eaf20fa5aab4556b10809a2a5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6216523c25c27cf8e2171bbaac79819d2e1982eaf20fa5aab4556b10809a2a5e"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6216523c25c27cf8e2171bbaac79819d2e1982eaf20fa5aab4556b10809a2a5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6216523c25c27cf8e2171bbaac79819d2e1982eaf20fa5aab4556b10809a2a5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6216523c25c27cf8e2171bbaac79819d2e1982eaf20fa5aab4556b10809a2a5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6216523c25c27cf8e2171bbaac79819d2e1982eaf20fa5aab4556b10809a2a5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b"}
{"level":"info","ts":"2026-07-03T00:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"}
{"level":"info","ts":"2026-07-03T00:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6216523c25c27cf8e2171bbaac79819d2e1982eaf20fa5aab4556b10809a2a5e"}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a642446d15fc8023e0de223f254a3d01fe69c20ca5ed090e94fd435608f5ab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a642446d15fc8023e0de223f254a3d01fe69c20ca5ed090e94fd435608f5ab0"}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc"}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc"}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc"}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc"}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516"}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc"}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:03:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7"}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7"}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"338a3eea933bbb3095c7aed86e6f97e63a607b3998cdfc24d80f102c02758786","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7"}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221c2909f9e7397361c52fbc51a8b001cfc9bce09a245c70fda566ca300377c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/338a3eea933bbb3095c7aed86e6f97e63a607b3998cdfc24d80f102c02758786"}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b"}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221c2909f9e7397361c52fbc51a8b001cfc9bce09a245c70fda566ca300377c7"}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8374e423d2a650a998f347cf2c973100e50115b7ad9442e6fcf6f9e3b4c930","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe"}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8374e423d2a650a998f347cf2c973100e50115b7ad9442e6fcf6f9e3b4c930"}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6216523c25c27cf8e2171bbaac79819d2e1982eaf20fa5aab4556b10809a2a5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510"}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a9e9ee10de3351bf07f29566b6e2b7b1f9baa6ec78e6c77c860525f98044c6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6216523c25c27cf8e2171bbaac79819d2e1982eaf20fa5aab4556b10809a2a5e"}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a9e9ee10de3351bf07f29566b6e2b7b1f9baa6ec78e6c77c860525f98044c6c"}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db"}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"668d2a34765fdca6659e73c88b4caf6abc590af45ca4c6194b29fdbd2a758ecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31"}
{"level":"debug","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/668d2a34765fdca6659e73c88b4caf6abc590af45ca4c6194b29fdbd2a758ecc"}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"}
{"level":"info","ts":"2026-07-03T00:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3"}
{"level":"info","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95fb4fbd-633a-49d0-a668-3b7ad60bafef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38518","PortSpecifier":{"PortValue":38518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95fb4fbd-633a-49d0-a668-3b7ad60bafef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95fb4fbd-633a-49d0-a668-3b7ad60bafef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38518","PortSpecifier":{"PortValue":38518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037045,"nanos":880024138},"http":{"id":"95fb4fbd-633a-49d0-a668-3b7ad60bafef","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"95fb4fbd-633a-49d0-a668-3b7ad60bafef","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95fb4fbd-633a-49d0-a668-3b7ad60bafef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95fb4fbd-633a-49d0-a668-3b7ad60bafef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95fb4fbd-633a-49d0-a668-3b7ad60bafef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95fb4fbd-633a-49d0-a668-3b7ad60bafef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95fb4fbd-633a-49d0-a668-3b7ad60bafef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/sub-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"95fb4fbd-633a-49d0-a668-3b7ad60bafef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95fb4fbd-633a-49d0-a668-3b7ad60bafef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95fb4fbd-633a-49d0-a668-3b7ad60bafef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95fb4fbd-633a-49d0-a668-3b7ad60bafef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95fb4fbd-633a-49d0-a668-3b7ad60bafef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"396b5cae-ea49-48b1-bded-38fd5a6e6be6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49710","PortSpecifier":{"PortValue":49710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"396b5cae-ea49-48b1-bded-38fd5a6e6be6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"396b5cae-ea49-48b1-bded-38fd5a6e6be6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49710","PortSpecifier":{"PortValue":49710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037045,"nanos":924060626},"http":{"id":"396b5cae-ea49-48b1-bded-38fd5a6e6be6","method":"POST","headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"396b5cae-ea49-48b1-bded-38fd5a6e6be6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"396b5cae-ea49-48b1-bded-38fd5a6e6be6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"396b5cae-ea49-48b1-bded-38fd5a6e6be6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"396b5cae-ea49-48b1-bded-38fd5a6e6be6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"396b5cae-ea49-48b1-bded-38fd5a6e6be6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"396b5cae-ea49-48b1-bded-38fd5a6e6be6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c04a64/sub-test-model-c04a64\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"396b5cae-ea49-48b1-bded-38fd5a6e6be6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"396b5cae-ea49-48b1-bded-38fd5a6e6be6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"396b5cae-ea49-48b1-bded-38fd5a6e6be6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"396b5cae-ea49-48b1-bded-38fd5a6e6be6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"396b5cae-ea49-48b1-bded-38fd5a6e6be6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8e1ec8b-f3c3-418b-b46c-bd562d2d5742","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38530","PortSpecifier":{"PortValue":38530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8e1ec8b-f3c3-418b-b46c-bd562d2d5742","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8e1ec8b-f3c3-418b-b46c-bd562d2d5742","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38530","PortSpecifier":{"PortValue":38530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037045,"nanos":963021334},"http":{"id":"b8e1ec8b-f3c3-418b-b46c-bd562d2d5742","method":"GET","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8e1ec8b-f3c3-418b-b46c-bd562d2d5742","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WcsTovdsXsRJPWQb_5F9EUoGa25480G7AFSUF0VauUEHgU6hdx4b6gYPvY8H"}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b8e1ec8b-f3c3-418b-b46c-bd562d2d5742","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WcsTovdsXsRJPWQb_5F9EUoGa25480G7AFSUF0VauUEHgU6hdx4b6gYPvY8H\"}"}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b8e1ec8b-f3c3-418b-b46c-bd562d2d5742","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b7553a30-8743-480b-a97a-ab231d03aac6","keyName":"e2e-sub-iso-207a68","subscription":"e2e-a-only-df8e96","tenant":"e2e-shared-a-c1893b","userId":"b7553a30-8743-480b-a97a-ab231d03aac6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8e1ec8b-f3c3-418b-b46c-bd562d2d5742","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8e1ec8b-f3c3-418b-b46c-bd562d2d5742","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8e1ec8b-f3c3-418b-b46c-bd562d2d5742","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8e1ec8b-f3c3-418b-b46c-bd562d2d5742","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/sub-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8e1ec8b-f3c3-418b-b46c-bd562d2d5742","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8e1ec8b-f3c3-418b-b46c-bd562d2d5742","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8e1ec8b-f3c3-418b-b46c-bd562d2d5742","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8e1ec8b-f3c3-418b-b46c-bd562d2d5742","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-df8e96"}
{"level":"info","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8e1ec8b-f3c3-418b-b46c-bd562d2d5742","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:04:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8e1ec8b-f3c3-418b-b46c-bd562d2d5742","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:04:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47da91da-3a9c-4dc1-80ec-d5420091122a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49724","PortSpecifier":{"PortValue":49724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47da91da-3a9c-4dc1-80ec-d5420091122a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:04:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47da91da-3a9c-4dc1-80ec-d5420091122a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49724","PortSpecifier":{"PortValue":49724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037046,"nanos":16057762},"http":{"id":"47da91da-3a9c-4dc1-80ec-d5420091122a","method":"GET","headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:04:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47da91da-3a9c-4dc1-80ec-d5420091122a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AyRTHaPBoIg8qoTp_bh0W5hdEFFP5Lr7oWXrx5ZBbpLJP4yivkXde4DRoM68"}
{"level":"debug","ts":"2026-07-03T00:04:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47da91da-3a9c-4dc1-80ec-d5420091122a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c04a64.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AyRTHaPBoIg8qoTp_bh0W5hdEFFP5Lr7oWXrx5ZBbpLJP4yivkXde4DRoM68\"}"}
{"level":"debug","ts":"2026-07-03T00:04:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47da91da-3a9c-4dc1-80ec-d5420091122a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c04a64.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45dc740f-08fc-4ce0-af3d-798e1a75b4d0","keyName":"e2e-sub-iso-8ac2a3","subscription":"e2e-b-only-df8e96","tenant":"e2e-shared-b-c04a64","userId":"45dc740f-08fc-4ce0-af3d-798e1a75b4d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T00:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47da91da-3a9c-4dc1-80ec-d5420091122a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47da91da-3a9c-4dc1-80ec-d5420091122a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47da91da-3a9c-4dc1-80ec-d5420091122a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47da91da-3a9c-4dc1-80ec-d5420091122a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c04a64/sub-test-model-c04a64\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47da91da-3a9c-4dc1-80ec-d5420091122a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47da91da-3a9c-4dc1-80ec-d5420091122a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T00:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47da91da-3a9c-4dc1-80ec-d5420091122a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-df8e96"}
{"level":"debug","ts":"2026-07-03T00:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47da91da-3a9c-4dc1-80ec-d5420091122a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:04:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47da91da-3a9c-4dc1-80ec-d5420091122a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:04:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47da91da-3a9c-4dc1-80ec-d5420091122a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"986dd321-c303-4ce6-b693-f99ca1625c2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35492","PortSpecifier":{"PortValue":35492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"986dd321-c303-4ce6-b693-f99ca1625c2c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"986dd321-c303-4ce6-b693-f99ca1625c2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35492","PortSpecifier":{"PortValue":35492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037062,"nanos":397537683},"http":{"id":"986dd321-c303-4ce6-b693-f99ca1625c2c","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"986dd321-c303-4ce6-b693-f99ca1625c2c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"986dd321-c303-4ce6-b693-f99ca1625c2c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"986dd321-c303-4ce6-b693-f99ca1625c2c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"986dd321-c303-4ce6-b693-f99ca1625c2c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"986dd321-c303-4ce6-b693-f99ca1625c2c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"986dd321-c303-4ce6-b693-f99ca1625c2c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/sub-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"986dd321-c303-4ce6-b693-f99ca1625c2c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"986dd321-c303-4ce6-b693-f99ca1625c2c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"986dd321-c303-4ce6-b693-f99ca1625c2c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"986dd321-c303-4ce6-b693-f99ca1625c2c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"986dd321-c303-4ce6-b693-f99ca1625c2c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17c58572-3458-4af2-9a62-7dcefd51461f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33298","PortSpecifier":{"PortValue":33298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17c58572-3458-4af2-9a62-7dcefd51461f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17c58572-3458-4af2-9a62-7dcefd51461f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33298","PortSpecifier":{"PortValue":33298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037062,"nanos":436048939},"http":{"id":"17c58572-3458-4af2-9a62-7dcefd51461f","method":"POST","headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"17c58572-3458-4af2-9a62-7dcefd51461f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17c58572-3458-4af2-9a62-7dcefd51461f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17c58572-3458-4af2-9a62-7dcefd51461f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17c58572-3458-4af2-9a62-7dcefd51461f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17c58572-3458-4af2-9a62-7dcefd51461f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17c58572-3458-4af2-9a62-7dcefd51461f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c04a64/sub-test-model-c04a64\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"17c58572-3458-4af2-9a62-7dcefd51461f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17c58572-3458-4af2-9a62-7dcefd51461f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17c58572-3458-4af2-9a62-7dcefd51461f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17c58572-3458-4af2-9a62-7dcefd51461f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17c58572-3458-4af2-9a62-7dcefd51461f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6341845-a7c4-44cb-aa62-101bb1ee10a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35496","PortSpecifier":{"PortValue":35496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6341845-a7c4-44cb-aa62-101bb1ee10a0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6341845-a7c4-44cb-aa62-101bb1ee10a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35496","PortSpecifier":{"PortValue":35496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037062,"nanos":471226702},"http":{"id":"f6341845-a7c4-44cb-aa62-101bb1ee10a0","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6341845-a7c4-44cb-aa62-101bb1ee10a0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ylQpkfRYTD56Eli0_PMuKzqm8exzNKzIgxxeyQ14ZfGFIfehb5f9qxwiRLJ"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6341845-a7c4-44cb-aa62-101bb1ee10a0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ylQpkfRYTD56Eli0_PMuKzqm8exzNKzIgxxeyQ14ZfGFIfehb5f9qxwiRLJ\"}"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6341845-a7c4-44cb-aa62-101bb1ee10a0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2891ddb2-348b-4bb3-a981-011c6b36a81d","keyName":"e2e-sub-iso-a793e5","subscription":"e2e-shared-sub-5275cc","tenant":"e2e-shared-a-c1893b","userId":"2891ddb2-348b-4bb3-a981-011c6b36a81d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6341845-a7c4-44cb-aa62-101bb1ee10a0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6341845-a7c4-44cb-aa62-101bb1ee10a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6341845-a7c4-44cb-aa62-101bb1ee10a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/sub-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6341845-a7c4-44cb-aa62-101bb1ee10a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f6341845-a7c4-44cb-aa62-101bb1ee10a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6341845-a7c4-44cb-aa62-101bb1ee10a0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6341845-a7c4-44cb-aa62-101bb1ee10a0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6341845-a7c4-44cb-aa62-101bb1ee10a0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-5275cc"}
{"level":"info","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6341845-a7c4-44cb-aa62-101bb1ee10a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6341845-a7c4-44cb-aa62-101bb1ee10a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40150c1d-fd85-41f6-8dfc-0817d5a62074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33304","PortSpecifier":{"PortValue":33304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40150c1d-fd85-41f6-8dfc-0817d5a62074","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40150c1d-fd85-41f6-8dfc-0817d5a62074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33304","PortSpecifier":{"PortValue":33304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037062,"nanos":505824159},"http":{"id":"40150c1d-fd85-41f6-8dfc-0817d5a62074","method":"POST","headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40150c1d-fd85-41f6-8dfc-0817d5a62074","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RmvQYiCc4d3FvMwb_mJtbJnqmsSA4i6OgJFr80DyZhClyJW1UfvMLCXKUUQI"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40150c1d-fd85-41f6-8dfc-0817d5a62074","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c04a64.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RmvQYiCc4d3FvMwb_mJtbJnqmsSA4i6OgJFr80DyZhClyJW1UfvMLCXKUUQI\"}"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40150c1d-fd85-41f6-8dfc-0817d5a62074","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c04a64.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"186b36d9-906b-4170-b290-1b2f77c3e9e5","keyName":"e2e-sub-iso-54f412","subscription":"e2e-shared-sub-5275cc","tenant":"e2e-shared-b-c04a64","userId":"186b36d9-906b-4170-b290-1b2f77c3e9e5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40150c1d-fd85-41f6-8dfc-0817d5a62074","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40150c1d-fd85-41f6-8dfc-0817d5a62074","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40150c1d-fd85-41f6-8dfc-0817d5a62074","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40150c1d-fd85-41f6-8dfc-0817d5a62074","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c04a64/sub-test-model-c04a64\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40150c1d-fd85-41f6-8dfc-0817d5a62074","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40150c1d-fd85-41f6-8dfc-0817d5a62074","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-5275cc"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"40150c1d-fd85-41f6-8dfc-0817d5a62074","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40150c1d-fd85-41f6-8dfc-0817d5a62074","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40150c1d-fd85-41f6-8dfc-0817d5a62074","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:04:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40150c1d-fd85-41f6-8dfc-0817d5a62074","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a642446d15fc8023e0de223f254a3d01fe69c20ca5ed090e94fd435608f5ab0"}
{"level":"info","ts":"2026-07-03T00:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/221c2909f9e7397361c52fbc51a8b001cfc9bce09a245c70fda566ca300377c7"}
{"level":"info","ts":"2026-07-03T00:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a9e9ee10de3351bf07f29566b6e2b7b1f9baa6ec78e6c77c860525f98044c6c"}
{"level":"info","ts":"2026-07-03T00:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/338a3eea933bbb3095c7aed86e6f97e63a607b3998cdfc24d80f102c02758786"}
{"level":"info","ts":"2026-07-03T00:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e984bfdd5e18d2754ae121f8bf38a2abda277f894f77d621cea29099f67cb490"}
{"level":"info","ts":"2026-07-03T00:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/668d2a34765fdca6659e73c88b4caf6abc590af45ca4c6194b29fdbd2a758ecc"}
{"level":"info","ts":"2026-07-03T00:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/707fe45ff72db249c2bfcc3cf7e87816a3be74c302181bcf724a650e2c2d6516"}
{"level":"info","ts":"2026-07-03T00:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44a4506ecdaad212051f4b5441ce23cc1ae27924fcf217829f420f035e641719"}
{"level":"info","ts":"2026-07-03T00:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f5073274362b6eef0747ea7d838b51a9c3b57bc8adc087f16e46ad2431849db"}
{"level":"info","ts":"2026-07-03T00:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30b4ad900ef6fe8a78b168453fd3aac65e3eca86350460d2f737092d79770510"}
{"level":"info","ts":"2026-07-03T00:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/140d9a6d227d2c4d2144435b2fbf6286f75e39acbce2053d21192f5058f5300b"}
{"level":"info","ts":"2026-07-03T00:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d3d46276419c2194eb4e8417f93e91aa586b07e4bd057f4aab37c82af13b5c7"}
{"level":"info","ts":"2026-07-03T00:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50ed8e1a84a364c0c54548ec5c17e013986380ecbfe7cae7db4bf8b9d23067e3"}
{"level":"info","ts":"2026-07-03T00:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d467eec503e1d0241e572de24889df91bc5d4117f386a2c026cb6a8f431acdc"}
{"level":"info","ts":"2026-07-03T00:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa8374e423d2a650a998f347cf2c973100e50115b7ad9442e6fcf6f9e3b4c930"}
{"level":"info","ts":"2026-07-03T00:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6216523c25c27cf8e2171bbaac79819d2e1982eaf20fa5aab4556b10809a2a5e"}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6"}
{"level":"info","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6"}
{"level":"info","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6"}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6"}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6"}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a"}
{"level":"info","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a"}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6"}
{"level":"info","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a"}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a"}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a"}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a"}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2"}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2"}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2"}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a"}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e722022f2df429325491df3e198970ad21f4b82d63e615ab909e5169a184ff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e722022f2df429325491df3e198970ad21f4b82d63e615ab909e5169a184ff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e722022f2df429325491df3e198970ad21f4b82d63e615ab909e5169a184ff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e722022f2df429325491df3e198970ad21f4b82d63e615ab909e5169a184ff4"}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e722022f2df429325491df3e198970ad21f4b82d63e615ab909e5169a184ff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e722022f2df429325491df3e198970ad21f4b82d63e615ab909e5169a184ff4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e722022f2df429325491df3e198970ad21f4b82d63e615ab909e5169a184ff4"}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e722022f2df429325491df3e198970ad21f4b82d63e615ab909e5169a184ff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e722022f2df429325491df3e198970ad21f4b82d63e615ab909e5169a184ff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2"}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e722022f2df429325491df3e198970ad21f4b82d63e615ab909e5169a184ff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e722022f2df429325491df3e198970ad21f4b82d63e615ab909e5169a184ff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1"}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e722022f2df429325491df3e198970ad21f4b82d63e615ab909e5169a184ff4"}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1"}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e0af91736b2039b38a9adcd2c150c7d2ccd078b19473a5b786d61822a5512d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1"}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e0af91736b2039b38a9adcd2c150c7d2ccd078b19473a5b786d61822a5512d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e082a3930745300ba9f92ca0b5596d33954f42d2ae63d6b7254ac4b87b327354","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e0af91736b2039b38a9adcd2c150c7d2ccd078b19473a5b786d61822a5512d2"}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e082a3930745300ba9f92ca0b5596d33954f42d2ae63d6b7254ac4b87b327354","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e0af91736b2039b38a9adcd2c150c7d2ccd078b19473a5b786d61822a5512d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e0af91736b2039b38a9adcd2c150c7d2ccd078b19473a5b786d61822a5512d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e0af91736b2039b38a9adcd2c150c7d2ccd078b19473a5b786d61822a5512d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e082a3930745300ba9f92ca0b5596d33954f42d2ae63d6b7254ac4b87b327354"}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e082a3930745300ba9f92ca0b5596d33954f42d2ae63d6b7254ac4b87b327354","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e082a3930745300ba9f92ca0b5596d33954f42d2ae63d6b7254ac4b87b327354"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e082a3930745300ba9f92ca0b5596d33954f42d2ae63d6b7254ac4b87b327354","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e0af91736b2039b38a9adcd2c150c7d2ccd078b19473a5b786d61822a5512d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f"}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e082a3930745300ba9f92ca0b5596d33954f42d2ae63d6b7254ac4b87b327354","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1"}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e0af91736b2039b38a9adcd2c150c7d2ccd078b19473a5b786d61822a5512d2"}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e082a3930745300ba9f92ca0b5596d33954f42d2ae63d6b7254ac4b87b327354"}
{"level":"info","ts":"2026-07-03T00:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f"}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a763e4ad1853c36452aef39d17cf3dcbddd423657e50b41b591a757252742b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a763e4ad1853c36452aef39d17cf3dcbddd423657e50b41b591a757252742b3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a763e4ad1853c36452aef39d17cf3dcbddd423657e50b41b591a757252742b3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a763e4ad1853c36452aef39d17cf3dcbddd423657e50b41b591a757252742b3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a763e4ad1853c36452aef39d17cf3dcbddd423657e50b41b591a757252742b3f"}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a763e4ad1853c36452aef39d17cf3dcbddd423657e50b41b591a757252742b3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a763e4ad1853c36452aef39d17cf3dcbddd423657e50b41b591a757252742b3f"}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a763e4ad1853c36452aef39d17cf3dcbddd423657e50b41b591a757252742b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a763e4ad1853c36452aef39d17cf3dcbddd423657e50b41b591a757252742b3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a763e4ad1853c36452aef39d17cf3dcbddd423657e50b41b591a757252742b3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a763e4ad1853c36452aef39d17cf3dcbddd423657e50b41b591a757252742b3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a763e4ad1853c36452aef39d17cf3dcbddd423657e50b41b591a757252742b3f"}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"528f225dd7f0aa38fba1006fae475336156f4c12ffb3a1161d826f681920c14b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"528f225dd7f0aa38fba1006fae475336156f4c12ffb3a1161d826f681920c14b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"528f225dd7f0aa38fba1006fae475336156f4c12ffb3a1161d826f681920c14b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/528f225dd7f0aa38fba1006fae475336156f4c12ffb3a1161d826f681920c14b"}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"528f225dd7f0aa38fba1006fae475336156f4c12ffb3a1161d826f681920c14b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"528f225dd7f0aa38fba1006fae475336156f4c12ffb3a1161d826f681920c14b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["528f225dd7f0aa38fba1006fae475336156f4c12ffb3a1161d826f681920c14b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"528f225dd7f0aa38fba1006fae475336156f4c12ffb3a1161d826f681920c14b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/528f225dd7f0aa38fba1006fae475336156f4c12ffb3a1161d826f681920c14b"}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"528f225dd7f0aa38fba1006fae475336156f4c12ffb3a1161d826f681920c14b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/528f225dd7f0aa38fba1006fae475336156f4c12ffb3a1161d826f681920c14b"}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"}
{"level":"debug","ts":"2026-07-03T00:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed9afe99fd36847894a8076fae3a6cd66e8cd86ca334384c418a91adcec655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed9afe99fd36847894a8076fae3a6cd66e8cd86ca334384c418a91adcec655e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed9afe99fd36847894a8076fae3a6cd66e8cd86ca334384c418a91adcec655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed9afe99fd36847894a8076fae3a6cd66e8cd86ca334384c418a91adcec655e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed9afe99fd36847894a8076fae3a6cd66e8cd86ca334384c418a91adcec655e"}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed9afe99fd36847894a8076fae3a6cd66e8cd86ca334384c418a91adcec655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed9afe99fd36847894a8076fae3a6cd66e8cd86ca334384c418a91adcec655e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae"}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed9afe99fd36847894a8076fae3a6cd66e8cd86ca334384c418a91adcec655e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed9afe99fd36847894a8076fae3a6cd66e8cd86ca334384c418a91adcec655e"}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed9afe99fd36847894a8076fae3a6cd66e8cd86ca334384c418a91adcec655e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45bc141730a22211d318ca1c9eec182608d02bb43b372ad240604c385b93b39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae"}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45bc141730a22211d318ca1c9eec182608d02bb43b372ad240604c385b93b39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45bc141730a22211d318ca1c9eec182608d02bb43b372ad240604c385b93b39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45bc141730a22211d318ca1c9eec182608d02bb43b372ad240604c385b93b39"}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45bc141730a22211d318ca1c9eec182608d02bb43b372ad240604c385b93b39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae"}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45bc141730a22211d318ca1c9eec182608d02bb43b372ad240604c385b93b39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45bc141730a22211d318ca1c9eec182608d02bb43b372ad240604c385b93b39"}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45bc141730a22211d318ca1c9eec182608d02bb43b372ad240604c385b93b39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45bc141730a22211d318ca1c9eec182608d02bb43b372ad240604c385b93b39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45bc141730a22211d318ca1c9eec182608d02bb43b372ad240604c385b93b39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45bc141730a22211d318ca1c9eec182608d02bb43b372ad240604c385b93b39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45bc141730a22211d318ca1c9eec182608d02bb43b372ad240604c385b93b39"}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:04:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:04:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"debug","ts":"2026-07-03T00:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45bc141730a22211d318ca1c9eec182608d02bb43b372ad240604c385b93b39","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45bc141730a22211d318ca1c9eec182608d02bb43b372ad240604c385b93b39"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe"}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2"}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e082a3930745300ba9f92ca0b5596d33954f42d2ae63d6b7254ac4b87b327354","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e082a3930745300ba9f92ca0b5596d33954f42d2ae63d6b7254ac4b87b327354"}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e722022f2df429325491df3e198970ad21f4b82d63e615ab909e5169a184ff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T00:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae"}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed9afe99fd36847894a8076fae3a6cd66e8cd86ca334384c418a91adcec655e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e722022f2df429325491df3e198970ad21f4b82d63e615ab909e5169a184ff4"}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e0af91736b2039b38a9adcd2c150c7d2ccd078b19473a5b786d61822a5512d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed9afe99fd36847894a8076fae3a6cd66e8cd86ca334384c418a91adcec655e"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e0af91736b2039b38a9adcd2c150c7d2ccd078b19473a5b786d61822a5512d2"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31"}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"528f225dd7f0aa38fba1006fae475336156f4c12ffb3a1161d826f681920c14b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1"}
{"level":"debug","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a763e4ad1853c36452aef39d17cf3dcbddd423657e50b41b591a757252742b3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f"}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a"}
{"level":"info","ts":"2026-07-03T00:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/528f225dd7f0aa38fba1006fae475336156f4c12ffb3a1161d826f681920c14b"}
{"level":"info","ts":"2026-07-03T00:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6"}
{"level":"info","ts":"2026-07-03T00:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a763e4ad1853c36452aef39d17cf3dcbddd423657e50b41b591a757252742b3f"}
{"level":"info","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f44539b1-e294-4195-a135-4885d9b473e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46078","PortSpecifier":{"PortValue":46078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f44539b1-e294-4195-a135-4885d9b473e8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f44539b1-e294-4195-a135-4885d9b473e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46078","PortSpecifier":{"PortValue":46078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037122,"nanos":700860220},"http":{"id":"f44539b1-e294-4195-a135-4885d9b473e8","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f44539b1-e294-4195-a135-4885d9b473e8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f44539b1-e294-4195-a135-4885d9b473e8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f44539b1-e294-4195-a135-4885d9b473e8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f44539b1-e294-4195-a135-4885d9b473e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f44539b1-e294-4195-a135-4885d9b473e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f44539b1-e294-4195-a135-4885d9b473e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f44539b1-e294-4195-a135-4885d9b473e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f44539b1-e294-4195-a135-4885d9b473e8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f44539b1-e294-4195-a135-4885d9b473e8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f44539b1-e294-4195-a135-4885d9b473e8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f44539b1-e294-4195-a135-4885d9b473e8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41429167-c7cd-4106-bdb0-01588f40817a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:32968","PortSpecifier":{"PortValue":32968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41429167-c7cd-4106-bdb0-01588f40817a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41429167-c7cd-4106-bdb0-01588f40817a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:32968","PortSpecifier":{"PortValue":32968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037122,"nanos":745624541},"http":{"id":"41429167-c7cd-4106-bdb0-01588f40817a","method":"POST","headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"41429167-c7cd-4106-bdb0-01588f40817a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41429167-c7cd-4106-bdb0-01588f40817a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41429167-c7cd-4106-bdb0-01588f40817a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41429167-c7cd-4106-bdb0-01588f40817a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41429167-c7cd-4106-bdb0-01588f40817a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41429167-c7cd-4106-bdb0-01588f40817a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c04a64/rate-test-model-c04a64\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"41429167-c7cd-4106-bdb0-01588f40817a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41429167-c7cd-4106-bdb0-01588f40817a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41429167-c7cd-4106-bdb0-01588f40817a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41429167-c7cd-4106-bdb0-01588f40817a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41429167-c7cd-4106-bdb0-01588f40817a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46088","PortSpecifier":{"PortValue":46088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","method":"POST","path":"/ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b/v1/completions","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46088","PortSpecifier":{"PortValue":46088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037122,"nanos":808037151},"http":{"id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1E8nt67B4YdEHTRjd_iwz8dG9GKjLOWMXKZfzmZLe7T9CDdYWsSudGLfvvIr3"}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1E8nt67B4YdEHTRjd_iwz8dG9GKjLOWMXKZfzmZLe7T9CDdYWsSudGLfvvIr3\"}"}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e8003ee6-60e4-4745-90dd-854a71a26e05","keyName":"e2e-rate-a-767bdf","subscription":"e2e-rate-iso-a-767bdf","tenant":"e2e-shared-a-c1893b","userId":"e8003ee6-60e4-4745-90dd-854a71a26e05","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b\",\"requestedSubscription\":\"e2e-rate-iso-a-767bdf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c1893b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-767bdf","namespace":"ai-tenant-e2e-shared-a-c1893b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-767bdf"}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e8003ee6-60e4-4745-90dd-854a71a26e05","keyName":"e2e-rate-a-767bdf","selected_subscription":"e2e-rate-iso-a-767bdf","selected_subscription_key":"ai-tenant-e2e-shared-a-c1893b/e2e-rate-iso-a-767bdf@ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c1893b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-767bdf","namespace":"ai-tenant-e2e-shared-a-c1893b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:05:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccbb5684-84cc-44d1-b1e4-8ae69dfd208b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59484","PortSpecifier":{"PortValue":59484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","method":"POST","path":"/ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b/v1/completions","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59484","PortSpecifier":{"PortValue":59484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037123,"nanos":875553710},"http":{"id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1E8nt67B4YdEHTRjd_iwz8dG9GKjLOWMXKZfzmZLe7T9CDdYWsSudGLfvvIr3"}
{"level":"debug","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1E8nt67B4YdEHTRjd_iwz8dG9GKjLOWMXKZfzmZLe7T9CDdYWsSudGLfvvIr3\"}"}
{"level":"debug","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e8003ee6-60e4-4745-90dd-854a71a26e05","keyName":"e2e-rate-a-767bdf","subscription":"e2e-rate-iso-a-767bdf","tenant":"e2e-shared-a-c1893b","userId":"e8003ee6-60e4-4745-90dd-854a71a26e05","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b\",\"requestedSubscription\":\"e2e-rate-iso-a-767bdf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c1893b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-767bdf","namespace":"ai-tenant-e2e-shared-a-c1893b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-767bdf"}
{"level":"debug","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e8003ee6-60e4-4745-90dd-854a71a26e05","keyName":"e2e-rate-a-767bdf","selected_subscription":"e2e-rate-iso-a-767bdf","selected_subscription_key":"ai-tenant-e2e-shared-a-c1893b/e2e-rate-iso-a-767bdf@ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c1893b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-767bdf","namespace":"ai-tenant-e2e-shared-a-c1893b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:05:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71b84fdf-6ab9-4231-b7dc-fa659f1dc763","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59488","PortSpecifier":{"PortValue":59488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","method":"POST","path":"/ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b/v1/completions","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:59488","PortSpecifier":{"PortValue":59488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037124,"nanos":924757409},"http":{"id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1E8nt67B4YdEHTRjd_iwz8dG9GKjLOWMXKZfzmZLe7T9CDdYWsSudGLfvvIr3"}
{"level":"debug","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1E8nt67B4YdEHTRjd_iwz8dG9GKjLOWMXKZfzmZLe7T9CDdYWsSudGLfvvIr3\"}"}
{"level":"debug","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e8003ee6-60e4-4745-90dd-854a71a26e05","keyName":"e2e-rate-a-767bdf","subscription":"e2e-rate-iso-a-767bdf","tenant":"e2e-shared-a-c1893b","userId":"e8003ee6-60e4-4745-90dd-854a71a26e05","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b\",\"requestedSubscription\":\"e2e-rate-iso-a-767bdf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c1893b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-767bdf","namespace":"ai-tenant-e2e-shared-a-c1893b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-767bdf"}
{"level":"debug","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e8003ee6-60e4-4745-90dd-854a71a26e05","keyName":"e2e-rate-a-767bdf","selected_subscription":"e2e-rate-iso-a-767bdf","selected_subscription_key":"ai-tenant-e2e-shared-a-c1893b/e2e-rate-iso-a-767bdf@ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c1893b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-767bdf","namespace":"ai-tenant-e2e-shared-a-c1893b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:05:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a02bd000-642c-4f4f-bc32-61f4930efbbe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e502fa3-333f-49ca-8cfc-77e101870060","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:45898","PortSpecifier":{"PortValue":45898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e502fa3-333f-49ca-8cfc-77e101870060","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e502fa3-333f-49ca-8cfc-77e101870060","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:45898","PortSpecifier":{"PortValue":45898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037135,"nanos":789189835},"http":{"id":"8e502fa3-333f-49ca-8cfc-77e101870060","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e502fa3-333f-49ca-8cfc-77e101870060","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e502fa3-333f-49ca-8cfc-77e101870060","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e502fa3-333f-49ca-8cfc-77e101870060","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e502fa3-333f-49ca-8cfc-77e101870060","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e502fa3-333f-49ca-8cfc-77e101870060","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e502fa3-333f-49ca-8cfc-77e101870060","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e502fa3-333f-49ca-8cfc-77e101870060","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e502fa3-333f-49ca-8cfc-77e101870060","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e502fa3-333f-49ca-8cfc-77e101870060","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e502fa3-333f-49ca-8cfc-77e101870060","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e502fa3-333f-49ca-8cfc-77e101870060","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2b48403-9b00-4d86-8fff-bd23356d8104","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60914","PortSpecifier":{"PortValue":60914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2b48403-9b00-4d86-8fff-bd23356d8104","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2b48403-9b00-4d86-8fff-bd23356d8104","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60914","PortSpecifier":{"PortValue":60914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037135,"nanos":836302267},"http":{"id":"c2b48403-9b00-4d86-8fff-bd23356d8104","method":"POST","headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2b48403-9b00-4d86-8fff-bd23356d8104","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2b48403-9b00-4d86-8fff-bd23356d8104","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"63c8ce60-7436-4720-99c9-467d853cea82","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"]}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2b48403-9b00-4d86-8fff-bd23356d8104","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5769f42c6afa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6db3c759-22ae-43e3-9318-258550179693"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"63c8ce60-7436-4720-99c9-467d853cea82","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2b48403-9b00-4d86-8fff-bd23356d8104","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2b48403-9b00-4d86-8fff-bd23356d8104","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2b48403-9b00-4d86-8fff-bd23356d8104","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c04a64/rate-test-model-c04a64\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2b48403-9b00-4d86-8fff-bd23356d8104","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2b48403-9b00-4d86-8fff-bd23356d8104","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2b48403-9b00-4d86-8fff-bd23356d8104","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2b48403-9b00-4d86-8fff-bd23356d8104","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2b48403-9b00-4d86-8fff-bd23356d8104","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:45908","PortSpecifier":{"PortValue":45908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc9edc5d-f761-4468-9975-4c4ae74de974","method":"POST","path":"/ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b/v1/completions","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:45908","PortSpecifier":{"PortValue":45908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037135,"nanos":876889711},"http":{"id":"fc9edc5d-f761-4468-9975-4c4ae74de974","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HIm6h4b3uMhm1bYE_izdiCxoQwef9G9i6YgDT2SwQaZP7j8GfxW2ruxAHFYW"}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HIm6h4b3uMhm1bYE_izdiCxoQwef9G9i6YgDT2SwQaZP7j8GfxW2ruxAHFYW\"}"}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98b66811-f286-4a99-92de-ec51dd73b885","keyName":"e2e-rate-a-1db415","subscription":"e2e-rate-iso-a-1db415","tenant":"e2e-shared-a-c1893b","userId":"98b66811-f286-4a99-92de-ec51dd73b885","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b\",\"requestedSubscription\":\"e2e-rate-iso-a-1db415\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c1893b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1db415","namespace":"ai-tenant-e2e-shared-a-c1893b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1db415"}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98b66811-f286-4a99-92de-ec51dd73b885","keyName":"e2e-rate-a-1db415","selected_subscription":"e2e-rate-iso-a-1db415","selected_subscription_key":"ai-tenant-e2e-shared-a-c1893b/e2e-rate-iso-a-1db415@ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c1893b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1db415","namespace":"ai-tenant-e2e-shared-a-c1893b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:05:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc9edc5d-f761-4468-9975-4c4ae74de974","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43f9d719-3c12-480f-81c6-955374c96aec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:45922","PortSpecifier":{"PortValue":45922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43f9d719-3c12-480f-81c6-955374c96aec","method":"POST","path":"/ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b/v1/completions","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43f9d719-3c12-480f-81c6-955374c96aec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:45922","PortSpecifier":{"PortValue":45922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037136,"nanos":924116248},"http":{"id":"43f9d719-3c12-480f-81c6-955374c96aec","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43f9d719-3c12-480f-81c6-955374c96aec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HIm6h4b3uMhm1bYE_izdiCxoQwef9G9i6YgDT2SwQaZP7j8GfxW2ruxAHFYW"}
{"level":"debug","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43f9d719-3c12-480f-81c6-955374c96aec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HIm6h4b3uMhm1bYE_izdiCxoQwef9G9i6YgDT2SwQaZP7j8GfxW2ruxAHFYW\"}"}
{"level":"debug","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43f9d719-3c12-480f-81c6-955374c96aec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98b66811-f286-4a99-92de-ec51dd73b885","keyName":"e2e-rate-a-1db415","subscription":"e2e-rate-iso-a-1db415","tenant":"e2e-shared-a-c1893b","userId":"98b66811-f286-4a99-92de-ec51dd73b885","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43f9d719-3c12-480f-81c6-955374c96aec","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b\",\"requestedSubscription\":\"e2e-rate-iso-a-1db415\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43f9d719-3c12-480f-81c6-955374c96aec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c1893b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1db415","namespace":"ai-tenant-e2e-shared-a-c1893b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43f9d719-3c12-480f-81c6-955374c96aec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43f9d719-3c12-480f-81c6-955374c96aec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43f9d719-3c12-480f-81c6-955374c96aec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43f9d719-3c12-480f-81c6-955374c96aec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43f9d719-3c12-480f-81c6-955374c96aec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43f9d719-3c12-480f-81c6-955374c96aec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43f9d719-3c12-480f-81c6-955374c96aec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1db415"}
{"level":"debug","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43f9d719-3c12-480f-81c6-955374c96aec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43f9d719-3c12-480f-81c6-955374c96aec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98b66811-f286-4a99-92de-ec51dd73b885","keyName":"e2e-rate-a-1db415","selected_subscription":"e2e-rate-iso-a-1db415","selected_subscription_key":"ai-tenant-e2e-shared-a-c1893b/e2e-rate-iso-a-1db415@ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c1893b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1db415","namespace":"ai-tenant-e2e-shared-a-c1893b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43f9d719-3c12-480f-81c6-955374c96aec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43f9d719-3c12-480f-81c6-955374c96aec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:45930","PortSpecifier":{"PortValue":45930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01e7c11d-6db0-4829-a652-4aea8792218a","method":"POST","path":"/ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b/v1/completions","host":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:45930","PortSpecifier":{"PortValue":45930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037137,"nanos":964237694},"http":{"id":"01e7c11d-6db0-4829-a652-4aea8792218a","method":"POST","headers":{":authority":"e2e-shared-a-c1893b.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HIm6h4b3uMhm1bYE_izdiCxoQwef9G9i6YgDT2SwQaZP7j8GfxW2ruxAHFYW"}
{"level":"debug","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HIm6h4b3uMhm1bYE_izdiCxoQwef9G9i6YgDT2SwQaZP7j8GfxW2ruxAHFYW\"}"}
{"level":"debug","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98b66811-f286-4a99-92de-ec51dd73b885","keyName":"e2e-rate-a-1db415","subscription":"e2e-rate-iso-a-1db415","tenant":"e2e-shared-a-c1893b","userId":"98b66811-f286-4a99-92de-ec51dd73b885","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b\",\"requestedSubscription\":\"e2e-rate-iso-a-1db415\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c1893b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c1893b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1db415","namespace":"ai-tenant-e2e-shared-a-c1893b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1db415"}
{"level":"debug","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98b66811-f286-4a99-92de-ec51dd73b885","keyName":"e2e-rate-a-1db415","selected_subscription":"e2e-rate-iso-a-1db415","selected_subscription_key":"ai-tenant-e2e-shared-a-c1893b/e2e-rate-iso-a-1db415@ai-tenant-e2e-shared-a-c1893b/rate-test-model-c1893b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c1893b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1db415","namespace":"ai-tenant-e2e-shared-a-c1893b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:05:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01e7c11d-6db0-4829-a652-4aea8792218a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60916","PortSpecifier":{"PortValue":60916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4259a855-c5d4-4b35-b35d-fe89411c6251","method":"POST","path":"/ai-tenant-e2e-shared-b-c04a64/rate-test-model-c04a64/v1/completions","host":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60916","PortSpecifier":{"PortValue":60916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783037138,"nanos":3602079},"http":{"id":"4259a855-c5d4-4b35-b35d-fe89411c6251","method":"POST","headers":{":authority":"e2e-shared-b-c04a64.apps.c3e905de-b045-4731-9950-5769f42c6afa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c04a64/rate-test-model-c04a64/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bInc1K3y8T8OME6J_VSq1BZLn0LjxAm72QMq0YzpdxN6sFtCaq8jvWSAQLCD"}
{"level":"debug","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c04a64.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bInc1K3y8T8OME6J_VSq1BZLn0LjxAm72QMq0YzpdxN6sFtCaq8jvWSAQLCD\"}"}
{"level":"debug","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c04a64.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e193e6ea-97e3-4b20-b97a-9d135f44d73f","keyName":"e2e-rate-b-1db415","subscription":"e2e-rate-iso-b-1db415","tenant":"e2e-shared-b-c04a64","userId":"e193e6ea-97e3-4b20-b97a-9d135f44d73f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c04a64.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-c04a64/rate-test-model-c04a64\",\"requestedSubscription\":\"e2e-rate-iso-b-1db415\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c04a64.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c04a64","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1db415","namespace":"ai-tenant-e2e-shared-b-c04a64","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c04a64/rate-test-model-c04a64\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-1db415"}
{"level":"debug","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e193e6ea-97e3-4b20-b97a-9d135f44d73f","keyName":"e2e-rate-b-1db415","selected_subscription":"e2e-rate-iso-b-1db415","selected_subscription_key":"ai-tenant-e2e-shared-b-c04a64/e2e-rate-iso-b-1db415@ai-tenant-e2e-shared-b-c04a64/rate-test-model-c04a64","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c04a64","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1db415","namespace":"ai-tenant-e2e-shared-b-c04a64","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T00:05:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4259a855-c5d4-4b35-b35d-fe89411c6251","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T00:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4877d8e7ee2e8c2c0c6d2747e9308c638a18a73030093ec940c89cfc758447b"}
{"level":"info","ts":"2026-07-03T00:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a3e3f2f843d6483cdcca362c23890f82868b4e9b3b3a78256260983f3a19ea3"}
{"level":"info","ts":"2026-07-03T00:05:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1348a7eb4d55f3b032acf2fd5cc45e45c2dd6296b3ff35ff1cffdb4eb61b6f0f"}
{"level":"info","ts":"2026-07-03T00:05:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/528f225dd7f0aa38fba1006fae475336156f4c12ffb3a1161d826f681920c14b"}
{"level":"info","ts":"2026-07-03T00:05:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4202df8d97698a1057dbb21f850f20a4aaf35a7160e76fdf0028bdaec7ae2c1"}
{"level":"info","ts":"2026-07-03T00:05:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a763e4ad1853c36452aef39d17cf3dcbddd423657e50b41b591a757252742b3f"}
{"level":"info","ts":"2026-07-03T00:05:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5015004c107e398ed46ffa360c351fa355c2dd04ee4207e327c936f400d0cae"}
{"level":"info","ts":"2026-07-03T00:05:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ec51537be5c827d7afd815b6c19917d149bd1f77ae2807b451e486646f4ac31"}
{"level":"info","ts":"2026-07-03T00:05:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e722022f2df429325491df3e198970ad21f4b82d63e615ab909e5169a184ff4"}
{"level":"info","ts":"2026-07-03T00:05:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11498df2eb7dab8d63d1663bc1b37e1030abe36bec4363f8f80f44812c8e1ec6"}
{"level":"info","ts":"2026-07-03T00:05:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e082a3930745300ba9f92ca0b5596d33954f42d2ae63d6b7254ac4b87b327354"}
{"level":"info","ts":"2026-07-03T00:05:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e0af91736b2039b38a9adcd2c150c7d2ccd078b19473a5b786d61822a5512d2"}
{"level":"info","ts":"2026-07-03T00:05:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f45bc141730a22211d318ca1c9eec182608d02bb43b372ad240604c385b93b39"}
{"level":"info","ts":"2026-07-03T00:05:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9f293a6517c989372f4a98d74a5a6a4a1a33cb25386a13f563b9f17d83ee22a"}
{"level":"info","ts":"2026-07-03T00:05:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ed9afe99fd36847894a8076fae3a6cd66e8cd86ca334384c418a91adcec655e"}
{"level":"info","ts":"2026-07-03T00:05:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce4bceece345d2cc5b87e5b8a680301189b9015485169f692e96516419122c49"}
{"level":"info","ts":"2026-07-03T00:05:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/046309161e3ebcc60127a3076dc49916eba5dc8b18d7027725c0e22cd49cd0a5"}
{"level":"info","ts":"2026-07-03T00:05:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/839fed2a1267d927bb6e8083ccac3310c6317c185a63c14c9636790bf86a3de2"}
{"level":"info","ts":"2026-07-03T00:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aec796dedc4b0ef8499495a1c907c03b10f4c23e478c19ff130b0af72b8ebc5c"}
{"level":"info","ts":"2026-07-03T00:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28b3123908aba9c4b592f87a018314ae01b006056be0b0411583e0c5576acdbe"}