--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654f5a39f423291dc0e6c0ead97716afee44988460db87e7d075d3c3449b9d6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654f5a39f423291dc0e6c0ead97716afee44988460db87e7d075d3c3449b9d6e"}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295"}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295"}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d"}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d"}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295"}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d"}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295"}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d"}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295"}
{"level":"info","ts":"2026-07-16T23:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d"}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5"}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5"}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5"}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5"}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5"}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5"}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5"}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5"}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37"}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37"}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f"}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f"}
{"level":"info","ts":"2026-07-16T23:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62"}
{"level":"debug","ts":"2026-07-16T23:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f"}
{"level":"debug","ts":"2026-07-16T23:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f"}
{"level":"debug","ts":"2026-07-16T23:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f"}
{"level":"info","ts":"2026-07-16T23:05:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/654f5a39f423291dc0e6c0ead97716afee44988460db87e7d075d3c3449b9d6e"}
{"level":"info","ts":"2026-07-16T23:05:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b803cf6c21ad7c2027fbe66672006869a2f6c9cc84295ee7f18acd905377295"}
{"level":"info","ts":"2026-07-16T23:05:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8cc2d8984320159416b764e25eeb8b488b456beb3916e5b6362a595d342055d"}
{"level":"info","ts":"2026-07-16T23:05:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ea22cad0179e82973c294c6d5529ae670fb225207f738e415e539881cbb0dc5"}
{"level":"info","ts":"2026-07-16T23:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b20d51a803ee7eb2fd3aacc202d71956372e53021eeffb56650695172853cddf"}
{"level":"info","ts":"2026-07-16T23:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acf434b35abe76b9579e7893f4cea80e0441c8e4fdccb31d1e7a9a6f491abb37"}
{"level":"info","ts":"2026-07-16T23:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6a85f6e0086e3732c84670203374c1449c3bb75ab0d6546e5204be8d0d25b62"}
{"level":"info","ts":"2026-07-16T23:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd564d281755401457d275785ec9130f962f43e7c590ba59e10fc13f91c6b41f"}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04cc5d660dd3de4b7a7582a5a4ec7d7a7dd5cd88e069a8e53c7339120519802c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04cc5d660dd3de4b7a7582a5a4ec7d7a7dd5cd88e069a8e53c7339120519802c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04cc5d660dd3de4b7a7582a5a4ec7d7a7dd5cd88e069a8e53c7339120519802c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04cc5d660dd3de4b7a7582a5a4ec7d7a7dd5cd88e069a8e53c7339120519802c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04cc5d660dd3de4b7a7582a5a4ec7d7a7dd5cd88e069a8e53c7339120519802c"}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04cc5d660dd3de4b7a7582a5a4ec7d7a7dd5cd88e069a8e53c7339120519802c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04cc5d660dd3de4b7a7582a5a4ec7d7a7dd5cd88e069a8e53c7339120519802c"}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04cc5d660dd3de4b7a7582a5a4ec7d7a7dd5cd88e069a8e53c7339120519802c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04cc5d660dd3de4b7a7582a5a4ec7d7a7dd5cd88e069a8e53c7339120519802c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04cc5d660dd3de4b7a7582a5a4ec7d7a7dd5cd88e069a8e53c7339120519802c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04cc5d660dd3de4b7a7582a5a4ec7d7a7dd5cd88e069a8e53c7339120519802c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00a36f019746759bb893591409008e5cac6517fc7e1ed787f15481e319cca0e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04cc5d660dd3de4b7a7582a5a4ec7d7a7dd5cd88e069a8e53c7339120519802c"}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00a36f019746759bb893591409008e5cac6517fc7e1ed787f15481e319cca0e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00a36f019746759bb893591409008e5cac6517fc7e1ed787f15481e319cca0e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00a36f019746759bb893591409008e5cac6517fc7e1ed787f15481e319cca0e8"}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00a36f019746759bb893591409008e5cac6517fc7e1ed787f15481e319cca0e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00a36f019746759bb893591409008e5cac6517fc7e1ed787f15481e319cca0e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00a36f019746759bb893591409008e5cac6517fc7e1ed787f15481e319cca0e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00a36f019746759bb893591409008e5cac6517fc7e1ed787f15481e319cca0e8"}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00a36f019746759bb893591409008e5cac6517fc7e1ed787f15481e319cca0e8"}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00a36f019746759bb893591409008e5cac6517fc7e1ed787f15481e319cca0e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00a36f019746759bb893591409008e5cac6517fc7e1ed787f15481e319cca0e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00a36f019746759bb893591409008e5cac6517fc7e1ed787f15481e319cca0e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00a36f019746759bb893591409008e5cac6517fc7e1ed787f15481e319cca0e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00a36f019746759bb893591409008e5cac6517fc7e1ed787f15481e319cca0e8"}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f"}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f"}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f"}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f"}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f"}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ea2f5a17a3a0146783d7e33e4635b76f9103320dd389dcd6cf484462b30e925","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f"}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ea2f5a17a3a0146783d7e33e4635b76f9103320dd389dcd6cf484462b30e925","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ea2f5a17a3a0146783d7e33e4635b76f9103320dd389dcd6cf484462b30e925","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ea2f5a17a3a0146783d7e33e4635b76f9103320dd389dcd6cf484462b30e925","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ea2f5a17a3a0146783d7e33e4635b76f9103320dd389dcd6cf484462b30e925"}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ea2f5a17a3a0146783d7e33e4635b76f9103320dd389dcd6cf484462b30e925","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ea2f5a17a3a0146783d7e33e4635b76f9103320dd389dcd6cf484462b30e925"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ea2f5a17a3a0146783d7e33e4635b76f9103320dd389dcd6cf484462b30e925","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ea2f5a17a3a0146783d7e33e4635b76f9103320dd389dcd6cf484462b30e925","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f"}
{"level":"info","ts":"2026-07-16T23:07:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ea2f5a17a3a0146783d7e33e4635b76f9103320dd389dcd6cf484462b30e925"}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcfcdb1e10a2e47c49244ec23f0582a0efb00b1d9a3b13965c38942047b4bf36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcfcdb1e10a2e47c49244ec23f0582a0efb00b1d9a3b13965c38942047b4bf36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcfcdb1e10a2e47c49244ec23f0582a0efb00b1d9a3b13965c38942047b4bf36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcfcdb1e10a2e47c49244ec23f0582a0efb00b1d9a3b13965c38942047b4bf36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcfcdb1e10a2e47c49244ec23f0582a0efb00b1d9a3b13965c38942047b4bf36"}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcfcdb1e10a2e47c49244ec23f0582a0efb00b1d9a3b13965c38942047b4bf36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcfcdb1e10a2e47c49244ec23f0582a0efb00b1d9a3b13965c38942047b4bf36"}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcfcdb1e10a2e47c49244ec23f0582a0efb00b1d9a3b13965c38942047b4bf36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcfcdb1e10a2e47c49244ec23f0582a0efb00b1d9a3b13965c38942047b4bf36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcfcdb1e10a2e47c49244ec23f0582a0efb00b1d9a3b13965c38942047b4bf36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcfcdb1e10a2e47c49244ec23f0582a0efb00b1d9a3b13965c38942047b4bf36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcfcdb1e10a2e47c49244ec23f0582a0efb00b1d9a3b13965c38942047b4bf36"}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0"}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0"}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85aaba1f7260b6d3104a75f8acf70d0d460ffa736c25a2457e89f0f5597e3947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85aaba1f7260b6d3104a75f8acf70d0d460ffa736c25a2457e89f0f5597e3947","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32bff4710dcb9fddd509622dbe223934d56c5bb48b8054d6a3e2cdbacfd231f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0"}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32bff4710dcb9fddd509622dbe223934d56c5bb48b8054d6a3e2cdbacfd231f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85aaba1f7260b6d3104a75f8acf70d0d460ffa736c25a2457e89f0f5597e3947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85aaba1f7260b6d3104a75f8acf70d0d460ffa736c25a2457e89f0f5597e3947"}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85aaba1f7260b6d3104a75f8acf70d0d460ffa736c25a2457e89f0f5597e3947","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e70c9cbe3e4b0e30ce5efd9871ea80701ae3353273d3ec4c3e3ed6fe0c9d752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32bff4710dcb9fddd509622dbe223934d56c5bb48b8054d6a3e2cdbacfd231f1"}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e70c9cbe3e4b0e30ce5efd9871ea80701ae3353273d3ec4c3e3ed6fe0c9d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32bff4710dcb9fddd509622dbe223934d56c5bb48b8054d6a3e2cdbacfd231f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32bff4710dcb9fddd509622dbe223934d56c5bb48b8054d6a3e2cdbacfd231f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32bff4710dcb9fddd509622dbe223934d56c5bb48b8054d6a3e2cdbacfd231f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd063741cfa8b2a53fd640ea23fa5f7c85d61c6601b6b2dc8a56283de135e49b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd063741cfa8b2a53fd640ea23fa5f7c85d61c6601b6b2dc8a56283de135e49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0"}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85aaba1f7260b6d3104a75f8acf70d0d460ffa736c25a2457e89f0f5597e3947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85aaba1f7260b6d3104a75f8acf70d0d460ffa736c25a2457e89f0f5597e3947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85aaba1f7260b6d3104a75f8acf70d0d460ffa736c25a2457e89f0f5597e3947","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e70c9cbe3e4b0e30ce5efd9871ea80701ae3353273d3ec4c3e3ed6fe0c9d752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e70c9cbe3e4b0e30ce5efd9871ea80701ae3353273d3ec4c3e3ed6fe0c9d752"}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e70c9cbe3e4b0e30ce5efd9871ea80701ae3353273d3ec4c3e3ed6fe0c9d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32bff4710dcb9fddd509622dbe223934d56c5bb48b8054d6a3e2cdbacfd231f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3348083b26f3d675af1bde11f23e708e406a7f92c61cdd99c426a88194962590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3348083b26f3d675af1bde11f23e708e406a7f92c61cdd99c426a88194962590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd063741cfa8b2a53fd640ea23fa5f7c85d61c6601b6b2dc8a56283de135e49b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd063741cfa8b2a53fd640ea23fa5f7c85d61c6601b6b2dc8a56283de135e49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd063741cfa8b2a53fd640ea23fa5f7c85d61c6601b6b2dc8a56283de135e49b"}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85aaba1f7260b6d3104a75f8acf70d0d460ffa736c25a2457e89f0f5597e3947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85aaba1f7260b6d3104a75f8acf70d0d460ffa736c25a2457e89f0f5597e3947","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e70c9cbe3e4b0e30ce5efd9871ea80701ae3353273d3ec4c3e3ed6fe0c9d752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e70c9cbe3e4b0e30ce5efd9871ea80701ae3353273d3ec4c3e3ed6fe0c9d752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85aaba1f7260b6d3104a75f8acf70d0d460ffa736c25a2457e89f0f5597e3947"}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e70c9cbe3e4b0e30ce5efd9871ea80701ae3353273d3ec4c3e3ed6fe0c9d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3348083b26f3d675af1bde11f23e708e406a7f92c61cdd99c426a88194962590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd063741cfa8b2a53fd640ea23fa5f7c85d61c6601b6b2dc8a56283de135e49b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd063741cfa8b2a53fd640ea23fa5f7c85d61c6601b6b2dc8a56283de135e49b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32bff4710dcb9fddd509622dbe223934d56c5bb48b8054d6a3e2cdbacfd231f1"}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd063741cfa8b2a53fd640ea23fa5f7c85d61c6601b6b2dc8a56283de135e49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85aaba1f7260b6d3104a75f8acf70d0d460ffa736c25a2457e89f0f5597e3947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85aaba1f7260b6d3104a75f8acf70d0d460ffa736c25a2457e89f0f5597e3947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85aaba1f7260b6d3104a75f8acf70d0d460ffa736c25a2457e89f0f5597e3947","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e70c9cbe3e4b0e30ce5efd9871ea80701ae3353273d3ec4c3e3ed6fe0c9d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3348083b26f3d675af1bde11f23e708e406a7f92c61cdd99c426a88194962590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3348083b26f3d675af1bde11f23e708e406a7f92c61cdd99c426a88194962590"}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3348083b26f3d675af1bde11f23e708e406a7f92c61cdd99c426a88194962590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd063741cfa8b2a53fd640ea23fa5f7c85d61c6601b6b2dc8a56283de135e49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85aaba1f7260b6d3104a75f8acf70d0d460ffa736c25a2457e89f0f5597e3947","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3348083b26f3d675af1bde11f23e708e406a7f92c61cdd99c426a88194962590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3348083b26f3d675af1bde11f23e708e406a7f92c61cdd99c426a88194962590"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3348083b26f3d675af1bde11f23e708e406a7f92c61cdd99c426a88194962590","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0"}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3348083b26f3d675af1bde11f23e708e406a7f92c61cdd99c426a88194962590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3348083b26f3d675af1bde11f23e708e406a7f92c61cdd99c426a88194962590","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e70c9cbe3e4b0e30ce5efd9871ea80701ae3353273d3ec4c3e3ed6fe0c9d752"}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd063741cfa8b2a53fd640ea23fa5f7c85d61c6601b6b2dc8a56283de135e49b"}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85aaba1f7260b6d3104a75f8acf70d0d460ffa736c25a2457e89f0f5597e3947"}
{"level":"info","ts":"2026-07-16T23:07:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3348083b26f3d675af1bde11f23e708e406a7f92c61cdd99c426a88194962590"}
{"level":"debug","ts":"2026-07-16T23:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62"}
{"level":"info","ts":"2026-07-16T23:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T23:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62"}
{"level":"info","ts":"2026-07-16T23:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62"}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d21726bf83e4ae26362c6deb3285a7d744f1f7be57d39aa677d27b52c6b29c05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d21726bf83e4ae26362c6deb3285a7d744f1f7be57d39aa677d27b52c6b29c05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d21726bf83e4ae26362c6deb3285a7d744f1f7be57d39aa677d27b52c6b29c05"}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d21726bf83e4ae26362c6deb3285a7d744f1f7be57d39aa677d27b52c6b29c05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d21726bf83e4ae26362c6deb3285a7d744f1f7be57d39aa677d27b52c6b29c05","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d21726bf83e4ae26362c6deb3285a7d744f1f7be57d39aa677d27b52c6b29c05"}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d21726bf83e4ae26362c6deb3285a7d744f1f7be57d39aa677d27b52c6b29c05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d21726bf83e4ae26362c6deb3285a7d744f1f7be57d39aa677d27b52c6b29c05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62"}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d21726bf83e4ae26362c6deb3285a7d744f1f7be57d39aa677d27b52c6b29c05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d21726bf83e4ae26362c6deb3285a7d744f1f7be57d39aa677d27b52c6b29c05","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d21726bf83e4ae26362c6deb3285a7d744f1f7be57d39aa677d27b52c6b29c05"}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba"}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba"}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008156a8f89ae184e90fa1091526884741ca29450bef5f492a58d4c3e9f19c6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba"}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008156a8f89ae184e90fa1091526884741ca29450bef5f492a58d4c3e9f19c6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008156a8f89ae184e90fa1091526884741ca29450bef5f492a58d4c3e9f19c6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008156a8f89ae184e90fa1091526884741ca29450bef5f492a58d4c3e9f19c6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008156a8f89ae184e90fa1091526884741ca29450bef5f492a58d4c3e9f19c6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008156a8f89ae184e90fa1091526884741ca29450bef5f492a58d4c3e9f19c6e"}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008156a8f89ae184e90fa1091526884741ca29450bef5f492a58d4c3e9f19c6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["008156a8f89ae184e90fa1091526884741ca29450bef5f492a58d4c3e9f19c6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008156a8f89ae184e90fa1091526884741ca29450bef5f492a58d4c3e9f19c6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008156a8f89ae184e90fa1091526884741ca29450bef5f492a58d4c3e9f19c6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba"}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c944f620f596012f4c9f4d1d64d5ed2597e7176ecd7e95c370927aa9498664b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008156a8f89ae184e90fa1091526884741ca29450bef5f492a58d4c3e9f19c6e"}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c944f620f596012f4c9f4d1d64d5ed2597e7176ecd7e95c370927aa9498664b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c944f620f596012f4c9f4d1d64d5ed2597e7176ecd7e95c370927aa9498664b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c944f620f596012f4c9f4d1d64d5ed2597e7176ecd7e95c370927aa9498664b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c944f620f596012f4c9f4d1d64d5ed2597e7176ecd7e95c370927aa9498664b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c944f620f596012f4c9f4d1d64d5ed2597e7176ecd7e95c370927aa9498664b3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c944f620f596012f4c9f4d1d64d5ed2597e7176ecd7e95c370927aa9498664b3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c944f620f596012f4c9f4d1d64d5ed2597e7176ecd7e95c370927aa9498664b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c944f620f596012f4c9f4d1d64d5ed2597e7176ecd7e95c370927aa9498664b3"}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c944f620f596012f4c9f4d1d64d5ed2597e7176ecd7e95c370927aa9498664b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c944f620f596012f4c9f4d1d64d5ed2597e7176ecd7e95c370927aa9498664b3"}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c944f620f596012f4c9f4d1d64d5ed2597e7176ecd7e95c370927aa9498664b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c944f620f596012f4c9f4d1d64d5ed2597e7176ecd7e95c370927aa9498664b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c"}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c944f620f596012f4c9f4d1d64d5ed2597e7176ecd7e95c370927aa9498664b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c944f620f596012f4c9f4d1d64d5ed2597e7176ecd7e95c370927aa9498664b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c"}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c944f620f596012f4c9f4d1d64d5ed2597e7176ecd7e95c370927aa9498664b3"}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276e9ca2d0a207ed9172dbf9b4da84f74396633a56604607bba96baaa06031ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c"}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276e9ca2d0a207ed9172dbf9b4da84f74396633a56604607bba96baaa06031ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3acdee071606408cd19aff9a8efee89e9d8ec894be8725e00c88a0becf5bee28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276e9ca2d0a207ed9172dbf9b4da84f74396633a56604607bba96baaa06031ce"}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3acdee071606408cd19aff9a8efee89e9d8ec894be8725e00c88a0becf5bee28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276e9ca2d0a207ed9172dbf9b4da84f74396633a56604607bba96baaa06031ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276e9ca2d0a207ed9172dbf9b4da84f74396633a56604607bba96baaa06031ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276e9ca2d0a207ed9172dbf9b4da84f74396633a56604607bba96baaa06031ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3acdee071606408cd19aff9a8efee89e9d8ec894be8725e00c88a0becf5bee28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3acdee071606408cd19aff9a8efee89e9d8ec894be8725e00c88a0becf5bee28"}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3acdee071606408cd19aff9a8efee89e9d8ec894be8725e00c88a0becf5bee28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276e9ca2d0a207ed9172dbf9b4da84f74396633a56604607bba96baaa06031ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3acdee071606408cd19aff9a8efee89e9d8ec894be8725e00c88a0becf5bee28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3acdee071606408cd19aff9a8efee89e9d8ec894be8725e00c88a0becf5bee28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3acdee071606408cd19aff9a8efee89e9d8ec894be8725e00c88a0becf5bee28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c"}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3acdee071606408cd19aff9a8efee89e9d8ec894be8725e00c88a0becf5bee28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276e9ca2d0a207ed9172dbf9b4da84f74396633a56604607bba96baaa06031ce"}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3acdee071606408cd19aff9a8efee89e9d8ec894be8725e00c88a0becf5bee28"}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84"}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e"}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc"}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84"}
{"level":"info","ts":"2026-07-16T23:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:07:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:07:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc"}
{"level":"info","ts":"2026-07-16T23:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:07:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:07:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T23:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e"}
{"level":"debug","ts":"2026-07-16T23:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84"}
{"level":"info","ts":"2026-07-16T23:07:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc"}
{"level":"info","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d308a9f-2cbf-4839-9ea7-4d18f58ac5fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40000","PortSpecifier":{"PortValue":40000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d308a9f-2cbf-4839-9ea7-4d18f58ac5fa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d308a9f-2cbf-4839-9ea7-4d18f58ac5fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40000","PortSpecifier":{"PortValue":40000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243273,"nanos":816947562},"http":{"id":"8d308a9f-2cbf-4839-9ea7-4d18f58ac5fa","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d308a9f-2cbf-4839-9ea7-4d18f58ac5fa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d308a9f-2cbf-4839-9ea7-4d18f58ac5fa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d308a9f-2cbf-4839-9ea7-4d18f58ac5fa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.125:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d308a9f-2cbf-4839-9ea7-4d18f58ac5fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d308a9f-2cbf-4839-9ea7-4d18f58ac5fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d308a9f-2cbf-4839-9ea7-4d18f58ac5fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/auth-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d308a9f-2cbf-4839-9ea7-4d18f58ac5fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d308a9f-2cbf-4839-9ea7-4d18f58ac5fa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d308a9f-2cbf-4839-9ea7-4d18f58ac5fa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d308a9f-2cbf-4839-9ea7-4d18f58ac5fa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d308a9f-2cbf-4839-9ea7-4d18f58ac5fa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00d4d507-4d62-4c2b-beea-cb4041c95173","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36364","PortSpecifier":{"PortValue":36364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00d4d507-4d62-4c2b-beea-cb4041c95173","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00d4d507-4d62-4c2b-beea-cb4041c95173","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36364","PortSpecifier":{"PortValue":36364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243273,"nanos":875296550},"http":{"id":"00d4d507-4d62-4c2b-beea-cb4041c95173","method":"POST","headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"00d4d507-4d62-4c2b-beea-cb4041c95173","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00d4d507-4d62-4c2b-beea-cb4041c95173","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00d4d507-4d62-4c2b-beea-cb4041c95173","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.127:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00d4d507-4d62-4c2b-beea-cb4041c95173","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00d4d507-4d62-4c2b-beea-cb4041c95173","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00d4d507-4d62-4c2b-beea-cb4041c95173","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-61f04e/auth-test-model-61f04e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-61f04e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"00d4d507-4d62-4c2b-beea-cb4041c95173","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00d4d507-4d62-4c2b-beea-cb4041c95173","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00d4d507-4d62-4c2b-beea-cb4041c95173","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00d4d507-4d62-4c2b-beea-cb4041c95173","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00d4d507-4d62-4c2b-beea-cb4041c95173","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f6f7cb6-a6d9-4e9a-9778-67bfacfca5cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40008","PortSpecifier":{"PortValue":40008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f6f7cb6-a6d9-4e9a-9778-67bfacfca5cc","method":"GET","path":"/maas-api/v1/api-keys/ad38e91e-d2e7-4405-b308-faea8a37d15b","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f6f7cb6-a6d9-4e9a-9778-67bfacfca5cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40008","PortSpecifier":{"PortValue":40008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243273,"nanos":940555099},"http":{"id":"4f6f7cb6-a6d9-4e9a-9778-67bfacfca5cc","method":"GET","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ad38e91e-d2e7-4405-b308-faea8a37d15b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4f6f7cb6-a6d9-4e9a-9778-67bfacfca5cc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f6f7cb6-a6d9-4e9a-9778-67bfacfca5cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f6f7cb6-a6d9-4e9a-9778-67bfacfca5cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.125:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ad38e91e-d2e7-4405-b308-faea8a37d15b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f6f7cb6-a6d9-4e9a-9778-67bfacfca5cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f6f7cb6-a6d9-4e9a-9778-67bfacfca5cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f6f7cb6-a6d9-4e9a-9778-67bfacfca5cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/auth-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f6f7cb6-a6d9-4e9a-9778-67bfacfca5cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f6f7cb6-a6d9-4e9a-9778-67bfacfca5cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f6f7cb6-a6d9-4e9a-9778-67bfacfca5cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f6f7cb6-a6d9-4e9a-9778-67bfacfca5cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f6f7cb6-a6d9-4e9a-9778-67bfacfca5cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de9c194b-acac-48e6-8d7e-5e3fbfca56a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36368","PortSpecifier":{"PortValue":36368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de9c194b-acac-48e6-8d7e-5e3fbfca56a5","method":"GET","path":"/maas-api/v1/api-keys/abd81e92-cdf6-4a1f-9355-4ce63e45b28c","host":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de9c194b-acac-48e6-8d7e-5e3fbfca56a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36368","PortSpecifier":{"PortValue":36368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243273,"nanos":974200638},"http":{"id":"de9c194b-acac-48e6-8d7e-5e3fbfca56a5","method":"GET","headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/abd81e92-cdf6-4a1f-9355-4ce63e45b28c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"de9c194b-acac-48e6-8d7e-5e3fbfca56a5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de9c194b-acac-48e6-8d7e-5e3fbfca56a5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de9c194b-acac-48e6-8d7e-5e3fbfca56a5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.127:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/abd81e92-cdf6-4a1f-9355-4ce63e45b28c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de9c194b-acac-48e6-8d7e-5e3fbfca56a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de9c194b-acac-48e6-8d7e-5e3fbfca56a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de9c194b-acac-48e6-8d7e-5e3fbfca56a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-61f04e/auth-test-model-61f04e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-61f04e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"de9c194b-acac-48e6-8d7e-5e3fbfca56a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de9c194b-acac-48e6-8d7e-5e3fbfca56a5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de9c194b-acac-48e6-8d7e-5e3fbfca56a5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de9c194b-acac-48e6-8d7e-5e3fbfca56a5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de9c194b-acac-48e6-8d7e-5e3fbfca56a5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38ae6d48-17fe-4ba3-b0b2-b1b1237455bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32908","PortSpecifier":{"PortValue":32908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"38ae6d48-17fe-4ba3-b0b2-b1b1237455bc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38ae6d48-17fe-4ba3-b0b2-b1b1237455bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32908","PortSpecifier":{"PortValue":32908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243293,"nanos":119895460},"http":{"id":"38ae6d48-17fe-4ba3-b0b2-b1b1237455bc","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"38ae6d48-17fe-4ba3-b0b2-b1b1237455bc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"38ae6d48-17fe-4ba3-b0b2-b1b1237455bc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"38ae6d48-17fe-4ba3-b0b2-b1b1237455bc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.125:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38ae6d48-17fe-4ba3-b0b2-b1b1237455bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38ae6d48-17fe-4ba3-b0b2-b1b1237455bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38ae6d48-17fe-4ba3-b0b2-b1b1237455bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/auth-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"38ae6d48-17fe-4ba3-b0b2-b1b1237455bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38ae6d48-17fe-4ba3-b0b2-b1b1237455bc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38ae6d48-17fe-4ba3-b0b2-b1b1237455bc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38ae6d48-17fe-4ba3-b0b2-b1b1237455bc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38ae6d48-17fe-4ba3-b0b2-b1b1237455bc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80d0449c-e786-4e13-ad40-55b8c57a3b0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35746","PortSpecifier":{"PortValue":35746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80d0449c-e786-4e13-ad40-55b8c57a3b0c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80d0449c-e786-4e13-ad40-55b8c57a3b0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35746","PortSpecifier":{"PortValue":35746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243293,"nanos":163484693},"http":{"id":"80d0449c-e786-4e13-ad40-55b8c57a3b0c","method":"POST","headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80d0449c-e786-4e13-ad40-55b8c57a3b0c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80d0449c-e786-4e13-ad40-55b8c57a3b0c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80d0449c-e786-4e13-ad40-55b8c57a3b0c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.127:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80d0449c-e786-4e13-ad40-55b8c57a3b0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80d0449c-e786-4e13-ad40-55b8c57a3b0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80d0449c-e786-4e13-ad40-55b8c57a3b0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-61f04e/auth-test-model-61f04e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-61f04e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80d0449c-e786-4e13-ad40-55b8c57a3b0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80d0449c-e786-4e13-ad40-55b8c57a3b0c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80d0449c-e786-4e13-ad40-55b8c57a3b0c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80d0449c-e786-4e13-ad40-55b8c57a3b0c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80d0449c-e786-4e13-ad40-55b8c57a3b0c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33f81af9-fcab-49ba-8efb-70b4c7b7b773","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32916","PortSpecifier":{"PortValue":32916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33f81af9-fcab-49ba-8efb-70b4c7b7b773","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33f81af9-fcab-49ba-8efb-70b4c7b7b773","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32916","PortSpecifier":{"PortValue":32916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243293,"nanos":202315914},"http":{"id":"33f81af9-fcab-49ba-8efb-70b4c7b7b773","method":"GET","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33f81af9-fcab-49ba-8efb-70b4c7b7b773","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zGKSW5byN80ZgmNS_n6WbVnGPUbHW5qtz6ohGARRWkhVAdtCnJwVsPmyQmP1"}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"33f81af9-fcab-49ba-8efb-70b4c7b7b773","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zGKSW5byN80ZgmNS_n6WbVnGPUbHW5qtz6ohGARRWkhVAdtCnJwVsPmyQmP1\"}"}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"33f81af9-fcab-49ba-8efb-70b4c7b7b773","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"659e9b5c-a6c5-46a4-9e61-fe55bfc1903d","keyName":"e2e-auth-iso-a-790327","subscription":"e2e-auth-iso-f3755f","tenant":"e2e-shared-a-b5738f","userId":"659e9b5c-a6c5-46a4-9e61-fe55bfc1903d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33f81af9-fcab-49ba-8efb-70b4c7b7b773","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33f81af9-fcab-49ba-8efb-70b4c7b7b773","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33f81af9-fcab-49ba-8efb-70b4c7b7b773","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33f81af9-fcab-49ba-8efb-70b4c7b7b773","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/auth-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33f81af9-fcab-49ba-8efb-70b4c7b7b773","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f3755f"}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33f81af9-fcab-49ba-8efb-70b4c7b7b773","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33f81af9-fcab-49ba-8efb-70b4c7b7b773","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33f81af9-fcab-49ba-8efb-70b4c7b7b773","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33f81af9-fcab-49ba-8efb-70b4c7b7b773","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:08:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33f81af9-fcab-49ba-8efb-70b4c7b7b773","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4474691e-a922-40d8-bec2-c8a1f5884309","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53474","PortSpecifier":{"PortValue":53474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4474691e-a922-40d8-bec2-c8a1f5884309","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4474691e-a922-40d8-bec2-c8a1f5884309","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53474","PortSpecifier":{"PortValue":53474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243312,"nanos":276335371},"http":{"id":"4474691e-a922-40d8-bec2-c8a1f5884309","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4474691e-a922-40d8-bec2-c8a1f5884309","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4474691e-a922-40d8-bec2-c8a1f5884309","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4474691e-a922-40d8-bec2-c8a1f5884309","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.125:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4474691e-a922-40d8-bec2-c8a1f5884309","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4474691e-a922-40d8-bec2-c8a1f5884309","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4474691e-a922-40d8-bec2-c8a1f5884309","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/auth-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4474691e-a922-40d8-bec2-c8a1f5884309","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4474691e-a922-40d8-bec2-c8a1f5884309","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4474691e-a922-40d8-bec2-c8a1f5884309","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4474691e-a922-40d8-bec2-c8a1f5884309","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4474691e-a922-40d8-bec2-c8a1f5884309","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8294da8a-9e70-4de7-bc26-6daad3a95558","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51712","PortSpecifier":{"PortValue":51712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8294da8a-9e70-4de7-bc26-6daad3a95558","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8294da8a-9e70-4de7-bc26-6daad3a95558","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51712","PortSpecifier":{"PortValue":51712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243312,"nanos":313232179},"http":{"id":"8294da8a-9e70-4de7-bc26-6daad3a95558","method":"POST","headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8294da8a-9e70-4de7-bc26-6daad3a95558","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8294da8a-9e70-4de7-bc26-6daad3a95558","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8294da8a-9e70-4de7-bc26-6daad3a95558","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.127:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8294da8a-9e70-4de7-bc26-6daad3a95558","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8294da8a-9e70-4de7-bc26-6daad3a95558","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8294da8a-9e70-4de7-bc26-6daad3a95558","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-61f04e/auth-test-model-61f04e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-61f04e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8294da8a-9e70-4de7-bc26-6daad3a95558","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8294da8a-9e70-4de7-bc26-6daad3a95558","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8294da8a-9e70-4de7-bc26-6daad3a95558","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8294da8a-9e70-4de7-bc26-6daad3a95558","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8294da8a-9e70-4de7-bc26-6daad3a95558","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82550f11-b5d8-4d46-9e22-61adeb88fe65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51726","PortSpecifier":{"PortValue":51726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82550f11-b5d8-4d46-9e22-61adeb88fe65","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82550f11-b5d8-4d46-9e22-61adeb88fe65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51726","PortSpecifier":{"PortValue":51726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243312,"nanos":345031213},"http":{"id":"82550f11-b5d8-4d46-9e22-61adeb88fe65","method":"GET","headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82550f11-b5d8-4d46-9e22-61adeb88fe65","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yeJ7tfxlpGHK2b7j_aopdwmrGE468zdJ3bAHraqoUoDdIVWWlVhljySTRIJ7"}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82550f11-b5d8-4d46-9e22-61adeb88fe65","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-61f04e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yeJ7tfxlpGHK2b7j_aopdwmrGE468zdJ3bAHraqoUoDdIVWWlVhljySTRIJ7\"}"}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82550f11-b5d8-4d46-9e22-61adeb88fe65","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-61f04e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82550f11-b5d8-4d46-9e22-61adeb88fe65","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.127:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82550f11-b5d8-4d46-9e22-61adeb88fe65","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"82550f11-b5d8-4d46-9e22-61adeb88fe65","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82550f11-b5d8-4d46-9e22-61adeb88fe65","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-16T23:08:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82550f11-b5d8-4d46-9e22-61adeb88fe65","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dba0a873-399f-45ae-b48b-e3d2be8403d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46970","PortSpecifier":{"PortValue":46970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dba0a873-399f-45ae-b48b-e3d2be8403d9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dba0a873-399f-45ae-b48b-e3d2be8403d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46970","PortSpecifier":{"PortValue":46970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243329,"nanos":371353963},"http":{"id":"dba0a873-399f-45ae-b48b-e3d2be8403d9","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dba0a873-399f-45ae-b48b-e3d2be8403d9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dba0a873-399f-45ae-b48b-e3d2be8403d9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dba0a873-399f-45ae-b48b-e3d2be8403d9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.125:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dba0a873-399f-45ae-b48b-e3d2be8403d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dba0a873-399f-45ae-b48b-e3d2be8403d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dba0a873-399f-45ae-b48b-e3d2be8403d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/auth-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dba0a873-399f-45ae-b48b-e3d2be8403d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dba0a873-399f-45ae-b48b-e3d2be8403d9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dba0a873-399f-45ae-b48b-e3d2be8403d9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dba0a873-399f-45ae-b48b-e3d2be8403d9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dba0a873-399f-45ae-b48b-e3d2be8403d9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"443a25c1-cff0-4849-b6bd-941ddc09390a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46352","PortSpecifier":{"PortValue":46352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"443a25c1-cff0-4849-b6bd-941ddc09390a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"443a25c1-cff0-4849-b6bd-941ddc09390a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46352","PortSpecifier":{"PortValue":46352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243329,"nanos":405428205},"http":{"id":"443a25c1-cff0-4849-b6bd-941ddc09390a","method":"POST","headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"443a25c1-cff0-4849-b6bd-941ddc09390a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"443a25c1-cff0-4849-b6bd-941ddc09390a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"443a25c1-cff0-4849-b6bd-941ddc09390a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.127:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"443a25c1-cff0-4849-b6bd-941ddc09390a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"443a25c1-cff0-4849-b6bd-941ddc09390a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"443a25c1-cff0-4849-b6bd-941ddc09390a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-61f04e/auth-test-model-61f04e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-61f04e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"443a25c1-cff0-4849-b6bd-941ddc09390a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"443a25c1-cff0-4849-b6bd-941ddc09390a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"443a25c1-cff0-4849-b6bd-941ddc09390a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"443a25c1-cff0-4849-b6bd-941ddc09390a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"443a25c1-cff0-4849-b6bd-941ddc09390a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"661288c7-db83-42c3-9fd6-25073a72b2ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46982","PortSpecifier":{"PortValue":46982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"661288c7-db83-42c3-9fd6-25073a72b2ae","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"661288c7-db83-42c3-9fd6-25073a72b2ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46982","PortSpecifier":{"PortValue":46982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243329,"nanos":441480450},"http":{"id":"661288c7-db83-42c3-9fd6-25073a72b2ae","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"661288c7-db83-42c3-9fd6-25073a72b2ae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"661288c7-db83-42c3-9fd6-25073a72b2ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"661288c7-db83-42c3-9fd6-25073a72b2ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.125:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"661288c7-db83-42c3-9fd6-25073a72b2ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"661288c7-db83-42c3-9fd6-25073a72b2ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"661288c7-db83-42c3-9fd6-25073a72b2ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/auth-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"661288c7-db83-42c3-9fd6-25073a72b2ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"661288c7-db83-42c3-9fd6-25073a72b2ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"661288c7-db83-42c3-9fd6-25073a72b2ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"661288c7-db83-42c3-9fd6-25073a72b2ae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"661288c7-db83-42c3-9fd6-25073a72b2ae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78e74d53-1533-43c6-9ab8-8cb369397dbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46362","PortSpecifier":{"PortValue":46362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78e74d53-1533-43c6-9ab8-8cb369397dbf","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78e74d53-1533-43c6-9ab8-8cb369397dbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46362","PortSpecifier":{"PortValue":46362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243329,"nanos":478482942},"http":{"id":"78e74d53-1533-43c6-9ab8-8cb369397dbf","method":"POST","headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78e74d53-1533-43c6-9ab8-8cb369397dbf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78e74d53-1533-43c6-9ab8-8cb369397dbf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78e74d53-1533-43c6-9ab8-8cb369397dbf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.127:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78e74d53-1533-43c6-9ab8-8cb369397dbf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78e74d53-1533-43c6-9ab8-8cb369397dbf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78e74d53-1533-43c6-9ab8-8cb369397dbf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-61f04e/auth-test-model-61f04e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-61f04e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78e74d53-1533-43c6-9ab8-8cb369397dbf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78e74d53-1533-43c6-9ab8-8cb369397dbf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78e74d53-1533-43c6-9ab8-8cb369397dbf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78e74d53-1533-43c6-9ab8-8cb369397dbf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:08:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78e74d53-1533-43c6-9ab8-8cb369397dbf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40d11dbf-8f98-48d9-bf51-7c418d484561","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52860","PortSpecifier":{"PortValue":52860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40d11dbf-8f98-48d9-bf51-7c418d484561","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40d11dbf-8f98-48d9-bf51-7c418d484561","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52860","PortSpecifier":{"PortValue":52860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243346,"nanos":488118279},"http":{"id":"40d11dbf-8f98-48d9-bf51-7c418d484561","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"40d11dbf-8f98-48d9-bf51-7c418d484561","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40d11dbf-8f98-48d9-bf51-7c418d484561","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40d11dbf-8f98-48d9-bf51-7c418d484561","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.125:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40d11dbf-8f98-48d9-bf51-7c418d484561","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40d11dbf-8f98-48d9-bf51-7c418d484561","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40d11dbf-8f98-48d9-bf51-7c418d484561","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/auth-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"40d11dbf-8f98-48d9-bf51-7c418d484561","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40d11dbf-8f98-48d9-bf51-7c418d484561","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40d11dbf-8f98-48d9-bf51-7c418d484561","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40d11dbf-8f98-48d9-bf51-7c418d484561","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40d11dbf-8f98-48d9-bf51-7c418d484561","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44bada7c-c3c6-4ae0-a5a7-56df52a627c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35940","PortSpecifier":{"PortValue":35940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44bada7c-c3c6-4ae0-a5a7-56df52a627c3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44bada7c-c3c6-4ae0-a5a7-56df52a627c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35940","PortSpecifier":{"PortValue":35940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243346,"nanos":522758481},"http":{"id":"44bada7c-c3c6-4ae0-a5a7-56df52a627c3","method":"POST","headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44bada7c-c3c6-4ae0-a5a7-56df52a627c3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44bada7c-c3c6-4ae0-a5a7-56df52a627c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44bada7c-c3c6-4ae0-a5a7-56df52a627c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.127:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44bada7c-c3c6-4ae0-a5a7-56df52a627c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44bada7c-c3c6-4ae0-a5a7-56df52a627c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44bada7c-c3c6-4ae0-a5a7-56df52a627c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-61f04e/auth-test-model-61f04e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-61f04e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44bada7c-c3c6-4ae0-a5a7-56df52a627c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44bada7c-c3c6-4ae0-a5a7-56df52a627c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44bada7c-c3c6-4ae0-a5a7-56df52a627c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44bada7c-c3c6-4ae0-a5a7-56df52a627c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44bada7c-c3c6-4ae0-a5a7-56df52a627c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13087174-bf6e-4e35-99b9-d6f3751a4d49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35950","PortSpecifier":{"PortValue":35950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13087174-bf6e-4e35-99b9-d6f3751a4d49","method":"GET","path":"/maas-api/v1/api-keys/91d68085-c6a7-4fab-8451-5ccc3500efdb","host":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13087174-bf6e-4e35-99b9-d6f3751a4d49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35950","PortSpecifier":{"PortValue":35950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243346,"nanos":553912442},"http":{"id":"13087174-bf6e-4e35-99b9-d6f3751a4d49","method":"GET","headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91d68085-c6a7-4fab-8451-5ccc3500efdb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"13087174-bf6e-4e35-99b9-d6f3751a4d49","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13087174-bf6e-4e35-99b9-d6f3751a4d49","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13087174-bf6e-4e35-99b9-d6f3751a4d49","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.127:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91d68085-c6a7-4fab-8451-5ccc3500efdb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13087174-bf6e-4e35-99b9-d6f3751a4d49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13087174-bf6e-4e35-99b9-d6f3751a4d49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13087174-bf6e-4e35-99b9-d6f3751a4d49","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-61f04e/auth-test-model-61f04e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-61f04e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"13087174-bf6e-4e35-99b9-d6f3751a4d49","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13087174-bf6e-4e35-99b9-d6f3751a4d49","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13087174-bf6e-4e35-99b9-d6f3751a4d49","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13087174-bf6e-4e35-99b9-d6f3751a4d49","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13087174-bf6e-4e35-99b9-d6f3751a4d49","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b18e4440-9080-46a9-8179-2277205ffcc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52862","PortSpecifier":{"PortValue":52862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b18e4440-9080-46a9-8179-2277205ffcc0","method":"GET","path":"/maas-api/v1/api-keys/91d68085-c6a7-4fab-8451-5ccc3500efdb","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b18e4440-9080-46a9-8179-2277205ffcc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52862","PortSpecifier":{"PortValue":52862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243346,"nanos":581203098},"http":{"id":"b18e4440-9080-46a9-8179-2277205ffcc0","method":"GET","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91d68085-c6a7-4fab-8451-5ccc3500efdb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b18e4440-9080-46a9-8179-2277205ffcc0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b18e4440-9080-46a9-8179-2277205ffcc0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b18e4440-9080-46a9-8179-2277205ffcc0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.125:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91d68085-c6a7-4fab-8451-5ccc3500efdb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b18e4440-9080-46a9-8179-2277205ffcc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b18e4440-9080-46a9-8179-2277205ffcc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b18e4440-9080-46a9-8179-2277205ffcc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/auth-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b18e4440-9080-46a9-8179-2277205ffcc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b18e4440-9080-46a9-8179-2277205ffcc0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b18e4440-9080-46a9-8179-2277205ffcc0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b18e4440-9080-46a9-8179-2277205ffcc0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:09:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b18e4440-9080-46a9-8179-2277205ffcc0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4c5893c-71e6-40db-9ae8-55cd721f81fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56842","PortSpecifier":{"PortValue":56842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4c5893c-71e6-40db-9ae8-55cd721f81fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4c5893c-71e6-40db-9ae8-55cd721f81fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56842","PortSpecifier":{"PortValue":56842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243363,"nanos":576974387},"http":{"id":"d4c5893c-71e6-40db-9ae8-55cd721f81fb","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d4c5893c-71e6-40db-9ae8-55cd721f81fb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4c5893c-71e6-40db-9ae8-55cd721f81fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4c5893c-71e6-40db-9ae8-55cd721f81fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.125:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4c5893c-71e6-40db-9ae8-55cd721f81fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4c5893c-71e6-40db-9ae8-55cd721f81fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4c5893c-71e6-40db-9ae8-55cd721f81fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/auth-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d4c5893c-71e6-40db-9ae8-55cd721f81fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4c5893c-71e6-40db-9ae8-55cd721f81fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4c5893c-71e6-40db-9ae8-55cd721f81fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4c5893c-71e6-40db-9ae8-55cd721f81fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4c5893c-71e6-40db-9ae8-55cd721f81fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9efdb3b2-fc85-4235-a701-952dc16665f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54328","PortSpecifier":{"PortValue":54328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9efdb3b2-fc85-4235-a701-952dc16665f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9efdb3b2-fc85-4235-a701-952dc16665f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54328","PortSpecifier":{"PortValue":54328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243363,"nanos":615931851},"http":{"id":"9efdb3b2-fc85-4235-a701-952dc16665f3","method":"POST","headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9efdb3b2-fc85-4235-a701-952dc16665f3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9efdb3b2-fc85-4235-a701-952dc16665f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9efdb3b2-fc85-4235-a701-952dc16665f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.127:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9efdb3b2-fc85-4235-a701-952dc16665f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9efdb3b2-fc85-4235-a701-952dc16665f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9efdb3b2-fc85-4235-a701-952dc16665f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-61f04e/auth-test-model-61f04e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-61f04e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9efdb3b2-fc85-4235-a701-952dc16665f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9efdb3b2-fc85-4235-a701-952dc16665f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9efdb3b2-fc85-4235-a701-952dc16665f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9efdb3b2-fc85-4235-a701-952dc16665f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9efdb3b2-fc85-4235-a701-952dc16665f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"408c771b-e011-43de-87fb-a107d5ee88cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59940","PortSpecifier":{"PortValue":59940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"408c771b-e011-43de-87fb-a107d5ee88cb","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"408c771b-e011-43de-87fb-a107d5ee88cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59940","PortSpecifier":{"PortValue":59940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243363,"nanos":650581680},"http":{"id":"408c771b-e011-43de-87fb-a107d5ee88cb","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"408c771b-e011-43de-87fb-a107d5ee88cb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pJZ4BjjINRmscnI_O8SnbuCpLPOCQu9m8jS0Rw0qzHX66jsiv98wjpTzcEc"}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"408c771b-e011-43de-87fb-a107d5ee88cb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pJZ4BjjINRmscnI_O8SnbuCpLPOCQu9m8jS0Rw0qzHX66jsiv98wjpTzcEc\"}"}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"408c771b-e011-43de-87fb-a107d5ee88cb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"458d6cbd-cd6a-46e9-aaaa-b7a884b662d9","keyName":"e2e-auth-iso-a-998680","subscription":"e2e-auth-iso-90a038","tenant":"e2e-shared-a-b5738f","userId":"458d6cbd-cd6a-46e9-aaaa-b7a884b662d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"408c771b-e011-43de-87fb-a107d5ee88cb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"408c771b-e011-43de-87fb-a107d5ee88cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"408c771b-e011-43de-87fb-a107d5ee88cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"408c771b-e011-43de-87fb-a107d5ee88cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/auth-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"408c771b-e011-43de-87fb-a107d5ee88cb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"408c771b-e011-43de-87fb-a107d5ee88cb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-90a038"}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"408c771b-e011-43de-87fb-a107d5ee88cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"408c771b-e011-43de-87fb-a107d5ee88cb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"408c771b-e011-43de-87fb-a107d5ee88cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:09:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"408c771b-e011-43de-87fb-a107d5ee88cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/008156a8f89ae184e90fa1091526884741ca29450bef5f492a58d4c3e9f19c6e"}
{"level":"info","ts":"2026-07-16T23:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d21726bf83e4ae26362c6deb3285a7d744f1f7be57d39aa677d27b52c6b29c05"}
{"level":"info","ts":"2026-07-16T23:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a081e0770184e641e45ca2d94ce9b2e42e9f04abe9c20473a08cd4d7d692033f"}
{"level":"info","ts":"2026-07-16T23:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/276e9ca2d0a207ed9172dbf9b4da84f74396633a56604607bba96baaa06031ce"}
{"level":"info","ts":"2026-07-16T23:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ea2f5a17a3a0146783d7e33e4635b76f9103320dd389dcd6cf484462b30e925"}
{"level":"info","ts":"2026-07-16T23:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c944f620f596012f4c9f4d1d64d5ed2597e7176ecd7e95c370927aa9498664b3"}
{"level":"info","ts":"2026-07-16T23:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3acdee071606408cd19aff9a8efee89e9d8ec894be8725e00c88a0becf5bee28"}
{"level":"info","ts":"2026-07-16T23:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47474ec0cc73086a1f73aef9d8cd41270679759406194e1d5b033ee439f6cb84"}
{"level":"info","ts":"2026-07-16T23:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32bff4710dcb9fddd509622dbe223934d56c5bb48b8054d6a3e2cdbacfd231f1"}
{"level":"info","ts":"2026-07-16T23:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbbe2278746eed23b100c09a6f46a30ebde1cd92e293235c678f7413915210f0"}
{"level":"info","ts":"2026-07-16T23:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00a36f019746759bb893591409008e5cac6517fc7e1ed787f15481e319cca0e8"}
{"level":"info","ts":"2026-07-16T23:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3348083b26f3d675af1bde11f23e708e406a7f92c61cdd99c426a88194962590"}
{"level":"info","ts":"2026-07-16T23:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd063741cfa8b2a53fd640ea23fa5f7c85d61c6601b6b2dc8a56283de135e49b"}
{"level":"info","ts":"2026-07-16T23:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85aaba1f7260b6d3104a75f8acf70d0d460ffa736c25a2457e89f0f5597e3947"}
{"level":"info","ts":"2026-07-16T23:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70d33d77a80e51ec8f01358a7907e9c92ccfe9ee16def820609369931e3a309c"}
{"level":"info","ts":"2026-07-16T23:09:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e935a1739aea8fe71b32526c0204b6be855defa98f88165b5b223a9b93d6bba"}
{"level":"debug","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0"}
{"level":"debug","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0"}
{"level":"debug","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0"}
{"level":"debug","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0"}
{"level":"debug","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0"}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de97d53e6373cf38cf40a5e23205000da03823d3e8df4db029ea70940a976691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de97d53e6373cf38cf40a5e23205000da03823d3e8df4db029ea70940a976691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de97d53e6373cf38cf40a5e23205000da03823d3e8df4db029ea70940a976691"}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de97d53e6373cf38cf40a5e23205000da03823d3e8df4db029ea70940a976691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de97d53e6373cf38cf40a5e23205000da03823d3e8df4db029ea70940a976691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8"}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de97d53e6373cf38cf40a5e23205000da03823d3e8df4db029ea70940a976691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de97d53e6373cf38cf40a5e23205000da03823d3e8df4db029ea70940a976691"}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de97d53e6373cf38cf40a5e23205000da03823d3e8df4db029ea70940a976691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8"}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de97d53e6373cf38cf40a5e23205000da03823d3e8df4db029ea70940a976691"}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8"}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2"}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2"}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2"}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850"}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850"}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2"}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850"}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348"}
{"level":"error","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348"}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348"}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa"}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa"}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa"}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa"}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"}
{"level":"debug","ts":"2026-07-16T23:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"error","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40aa5c8a324a06e3dbf7f92f5da83a9b9359089b16838291c4aa414c872096b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40aa5c8a324a06e3dbf7f92f5da83a9b9359089b16838291c4aa414c872096b3"}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40aa5c8a324a06e3dbf7f92f5da83a9b9359089b16838291c4aa414c872096b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40aa5c8a324a06e3dbf7f92f5da83a9b9359089b16838291c4aa414c872096b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40aa5c8a324a06e3dbf7f92f5da83a9b9359089b16838291c4aa414c872096b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40aa5c8a324a06e3dbf7f92f5da83a9b9359089b16838291c4aa414c872096b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40aa5c8a324a06e3dbf7f92f5da83a9b9359089b16838291c4aa414c872096b3"}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40aa5c8a324a06e3dbf7f92f5da83a9b9359089b16838291c4aa414c872096b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40aa5c8a324a06e3dbf7f92f5da83a9b9359089b16838291c4aa414c872096b3"}
{"level":"error","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"error","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5"}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e807f81e3d384db7dfb9705af00be8fa7b917ffa4ee39204859268fe7342d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e807f81e3d384db7dfb9705af00be8fa7b917ffa4ee39204859268fe7342d80"}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e807f81e3d384db7dfb9705af00be8fa7b917ffa4ee39204859268fe7342d80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5"}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e807f81e3d384db7dfb9705af00be8fa7b917ffa4ee39204859268fe7342d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e807f81e3d384db7dfb9705af00be8fa7b917ffa4ee39204859268fe7342d80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e807f81e3d384db7dfb9705af00be8fa7b917ffa4ee39204859268fe7342d80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e807f81e3d384db7dfb9705af00be8fa7b917ffa4ee39204859268fe7342d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e807f81e3d384db7dfb9705af00be8fa7b917ffa4ee39204859268fe7342d80"}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e807f81e3d384db7dfb9705af00be8fa7b917ffa4ee39204859268fe7342d80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9b87d425d84316319e8022ee1cd995e9fa3f7fe576d332646f1144c8ec9cc4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9b87d425d84316319e8022ee1cd995e9fa3f7fe576d332646f1144c8ec9cc4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e807f81e3d384db7dfb9705af00be8fa7b917ffa4ee39204859268fe7342d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e807f81e3d384db7dfb9705af00be8fa7b917ffa4ee39204859268fe7342d80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5"}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e807f81e3d384db7dfb9705af00be8fa7b917ffa4ee39204859268fe7342d80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9b87d425d84316319e8022ee1cd995e9fa3f7fe576d332646f1144c8ec9cc4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e807f81e3d384db7dfb9705af00be8fa7b917ffa4ee39204859268fe7342d80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9b87d425d84316319e8022ee1cd995e9fa3f7fe576d332646f1144c8ec9cc4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9b87d425d84316319e8022ee1cd995e9fa3f7fe576d332646f1144c8ec9cc4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9b87d425d84316319e8022ee1cd995e9fa3f7fe576d332646f1144c8ec9cc4a"}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9b87d425d84316319e8022ee1cd995e9fa3f7fe576d332646f1144c8ec9cc4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9b87d425d84316319e8022ee1cd995e9fa3f7fe576d332646f1144c8ec9cc4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9b87d425d84316319e8022ee1cd995e9fa3f7fe576d332646f1144c8ec9cc4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9b87d425d84316319e8022ee1cd995e9fa3f7fe576d332646f1144c8ec9cc4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9b87d425d84316319e8022ee1cd995e9fa3f7fe576d332646f1144c8ec9cc4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e807f81e3d384db7dfb9705af00be8fa7b917ffa4ee39204859268fe7342d80"}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9b87d425d84316319e8022ee1cd995e9fa3f7fe576d332646f1144c8ec9cc4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5"}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7"}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9b87d425d84316319e8022ee1cd995e9fa3f7fe576d332646f1144c8ec9cc4a"}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7"}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850"}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"info","ts":"2026-07-16T23:10:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850"}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa"}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa"}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa"}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8"}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7"}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7"}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de97d53e6373cf38cf40a5e23205000da03823d3e8df4db029ea70940a976691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7"}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de97d53e6373cf38cf40a5e23205000da03823d3e8df4db029ea70940a976691"}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7"}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0"}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"}
{"level":"info","ts":"2026-07-16T23:10:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62"}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e"}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e"}
{"level":"error","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e"}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcfcdb1e10a2e47c49244ec23f0582a0efb00b1d9a3b13965c38942047b4bf36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcfcdb1e10a2e47c49244ec23f0582a0efb00b1d9a3b13965c38942047b4bf36"}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e70c9cbe3e4b0e30ce5efd9871ea80701ae3353273d3ec4c3e3ed6fe0c9d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348"}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e70c9cbe3e4b0e30ce5efd9871ea80701ae3353273d3ec4c3e3ed6fe0c9d752"}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40aa5c8a324a06e3dbf7f92f5da83a9b9359089b16838291c4aa414c872096b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2"}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40aa5c8a324a06e3dbf7f92f5da83a9b9359089b16838291c4aa414c872096b3"}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04cc5d660dd3de4b7a7582a5a4ec7d7a7dd5cd88e069a8e53c7339120519802c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5"}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9b87d425d84316319e8022ee1cd995e9fa3f7fe576d332646f1144c8ec9cc4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04cc5d660dd3de4b7a7582a5a4ec7d7a7dd5cd88e069a8e53c7339120519802c"}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9b87d425d84316319e8022ee1cd995e9fa3f7fe576d332646f1144c8ec9cc4a"}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e807f81e3d384db7dfb9705af00be8fa7b917ffa4ee39204859268fe7342d80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc"}
{"level":"debug","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e807f81e3d384db7dfb9705af00be8fa7b917ffa4ee39204859268fe7342d80"}
{"level":"info","ts":"2026-07-16T23:10:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"info","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd4d837c-5324-4d62-afea-9caaa6cc8e41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37596","PortSpecifier":{"PortValue":37596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd4d837c-5324-4d62-afea-9caaa6cc8e41","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd4d837c-5324-4d62-afea-9caaa6cc8e41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37596","PortSpecifier":{"PortValue":37596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243416,"nanos":663555359},"http":{"id":"fd4d837c-5324-4d62-afea-9caaa6cc8e41","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd4d837c-5324-4d62-afea-9caaa6cc8e41","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd4d837c-5324-4d62-afea-9caaa6cc8e41","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd4d837c-5324-4d62-afea-9caaa6cc8e41","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.125:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd4d837c-5324-4d62-afea-9caaa6cc8e41","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd4d837c-5324-4d62-afea-9caaa6cc8e41","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd4d837c-5324-4d62-afea-9caaa6cc8e41","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/sub-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd4d837c-5324-4d62-afea-9caaa6cc8e41","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd4d837c-5324-4d62-afea-9caaa6cc8e41","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd4d837c-5324-4d62-afea-9caaa6cc8e41","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd4d837c-5324-4d62-afea-9caaa6cc8e41","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd4d837c-5324-4d62-afea-9caaa6cc8e41","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"024220b8-5cc9-401f-8b19-6902828d5476","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51354","PortSpecifier":{"PortValue":51354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"024220b8-5cc9-401f-8b19-6902828d5476","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"024220b8-5cc9-401f-8b19-6902828d5476","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51354","PortSpecifier":{"PortValue":51354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243416,"nanos":700354044},"http":{"id":"024220b8-5cc9-401f-8b19-6902828d5476","method":"POST","headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"024220b8-5cc9-401f-8b19-6902828d5476","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"024220b8-5cc9-401f-8b19-6902828d5476","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"024220b8-5cc9-401f-8b19-6902828d5476","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.127:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"024220b8-5cc9-401f-8b19-6902828d5476","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"024220b8-5cc9-401f-8b19-6902828d5476","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"024220b8-5cc9-401f-8b19-6902828d5476","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-61f04e/sub-test-model-61f04e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-61f04e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"024220b8-5cc9-401f-8b19-6902828d5476","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"024220b8-5cc9-401f-8b19-6902828d5476","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"024220b8-5cc9-401f-8b19-6902828d5476","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"024220b8-5cc9-401f-8b19-6902828d5476","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"024220b8-5cc9-401f-8b19-6902828d5476","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01a7ed42-c7e1-4682-9deb-e292ca8c3325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37598","PortSpecifier":{"PortValue":37598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01a7ed42-c7e1-4682-9deb-e292ca8c3325","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01a7ed42-c7e1-4682-9deb-e292ca8c3325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37598","PortSpecifier":{"PortValue":37598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243416,"nanos":738003673},"http":{"id":"01a7ed42-c7e1-4682-9deb-e292ca8c3325","method":"GET","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01a7ed42-c7e1-4682-9deb-e292ca8c3325","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hjy0KznJUoNN8Xn3_llYDBHRQGItG0P3KoaIp4xm707oDrBB4NSwqWIc7Pkc"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01a7ed42-c7e1-4682-9deb-e292ca8c3325","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hjy0KznJUoNN8Xn3_llYDBHRQGItG0P3KoaIp4xm707oDrBB4NSwqWIc7Pkc\"}"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01a7ed42-c7e1-4682-9deb-e292ca8c3325","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"87a1f36d-ed3b-4dec-8eaf-f60a6e9d6b39","keyName":"e2e-sub-iso-66bf1b","subscription":"e2e-a-only-8c092d","tenant":"e2e-shared-a-b5738f","userId":"87a1f36d-ed3b-4dec-8eaf-f60a6e9d6b39","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01a7ed42-c7e1-4682-9deb-e292ca8c3325","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01a7ed42-c7e1-4682-9deb-e292ca8c3325","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01a7ed42-c7e1-4682-9deb-e292ca8c3325","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01a7ed42-c7e1-4682-9deb-e292ca8c3325","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/sub-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01a7ed42-c7e1-4682-9deb-e292ca8c3325","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01a7ed42-c7e1-4682-9deb-e292ca8c3325","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-8c092d"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01a7ed42-c7e1-4682-9deb-e292ca8c3325","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01a7ed42-c7e1-4682-9deb-e292ca8c3325","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01a7ed42-c7e1-4682-9deb-e292ca8c3325","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01a7ed42-c7e1-4682-9deb-e292ca8c3325","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4027910e-187e-4610-9d93-6befc96b4a3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51362","PortSpecifier":{"PortValue":51362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4027910e-187e-4610-9d93-6befc96b4a3e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4027910e-187e-4610-9d93-6befc96b4a3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51362","PortSpecifier":{"PortValue":51362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243416,"nanos":765417846},"http":{"id":"4027910e-187e-4610-9d93-6befc96b4a3e","method":"GET","headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4027910e-187e-4610-9d93-6befc96b4a3e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ajZWiXbbPT8yRu2P_jPIBAMLGObgxMoL4DyIIFbdCTUa0Ig8ZIIdX98u0GVv"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4027910e-187e-4610-9d93-6befc96b4a3e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-61f04e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ajZWiXbbPT8yRu2P_jPIBAMLGObgxMoL4DyIIFbdCTUa0Ig8ZIIdX98u0GVv\"}"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4027910e-187e-4610-9d93-6befc96b4a3e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-61f04e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"90aa7920-bcbd-41ab-b3e8-b4bf362920ba","keyName":"e2e-sub-iso-66cfa0","subscription":"e2e-b-only-8c092d","tenant":"e2e-shared-b-61f04e","userId":"90aa7920-bcbd-41ab-b3e8-b4bf362920ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4027910e-187e-4610-9d93-6befc96b4a3e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4027910e-187e-4610-9d93-6befc96b4a3e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4027910e-187e-4610-9d93-6befc96b4a3e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4027910e-187e-4610-9d93-6befc96b4a3e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-61f04e/sub-test-model-61f04e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-61f04e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4027910e-187e-4610-9d93-6befc96b4a3e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4027910e-187e-4610-9d93-6befc96b4a3e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4027910e-187e-4610-9d93-6befc96b4a3e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-8c092d"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4027910e-187e-4610-9d93-6befc96b4a3e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4027910e-187e-4610-9d93-6befc96b4a3e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:10:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4027910e-187e-4610-9d93-6befc96b4a3e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88adb78c-7c86-41ba-855e-7e41c2ccc368","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57904","PortSpecifier":{"PortValue":57904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88adb78c-7c86-41ba-855e-7e41c2ccc368","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88adb78c-7c86-41ba-855e-7e41c2ccc368","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57904","PortSpecifier":{"PortValue":57904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243426,"nanos":613868647},"http":{"id":"88adb78c-7c86-41ba-855e-7e41c2ccc368","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88adb78c-7c86-41ba-855e-7e41c2ccc368","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88adb78c-7c86-41ba-855e-7e41c2ccc368","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88adb78c-7c86-41ba-855e-7e41c2ccc368","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.125:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88adb78c-7c86-41ba-855e-7e41c2ccc368","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88adb78c-7c86-41ba-855e-7e41c2ccc368","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88adb78c-7c86-41ba-855e-7e41c2ccc368","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/sub-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88adb78c-7c86-41ba-855e-7e41c2ccc368","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88adb78c-7c86-41ba-855e-7e41c2ccc368","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88adb78c-7c86-41ba-855e-7e41c2ccc368","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88adb78c-7c86-41ba-855e-7e41c2ccc368","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88adb78c-7c86-41ba-855e-7e41c2ccc368","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afabda18-5ec7-44c4-a97f-e715470bcd66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55310","PortSpecifier":{"PortValue":55310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afabda18-5ec7-44c4-a97f-e715470bcd66","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afabda18-5ec7-44c4-a97f-e715470bcd66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55310","PortSpecifier":{"PortValue":55310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243426,"nanos":645764087},"http":{"id":"afabda18-5ec7-44c4-a97f-e715470bcd66","method":"POST","headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"afabda18-5ec7-44c4-a97f-e715470bcd66","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afabda18-5ec7-44c4-a97f-e715470bcd66","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afabda18-5ec7-44c4-a97f-e715470bcd66","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.127:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afabda18-5ec7-44c4-a97f-e715470bcd66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afabda18-5ec7-44c4-a97f-e715470bcd66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afabda18-5ec7-44c4-a97f-e715470bcd66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-61f04e/sub-test-model-61f04e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-61f04e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"afabda18-5ec7-44c4-a97f-e715470bcd66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afabda18-5ec7-44c4-a97f-e715470bcd66","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afabda18-5ec7-44c4-a97f-e715470bcd66","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afabda18-5ec7-44c4-a97f-e715470bcd66","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afabda18-5ec7-44c4-a97f-e715470bcd66","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81cbca71-331f-49cd-8857-040081b640e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57916","PortSpecifier":{"PortValue":57916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81cbca71-331f-49cd-8857-040081b640e0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81cbca71-331f-49cd-8857-040081b640e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57916","PortSpecifier":{"PortValue":57916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243426,"nanos":678573786},"http":{"id":"81cbca71-331f-49cd-8857-040081b640e0","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81cbca71-331f-49cd-8857-040081b640e0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SqqD7vewfZEICS5i_h6hAUYIN0W0A8T02XoOW3xoC3ba0pQyJJKORGoPOB1R"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"81cbca71-331f-49cd-8857-040081b640e0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SqqD7vewfZEICS5i_h6hAUYIN0W0A8T02XoOW3xoC3ba0pQyJJKORGoPOB1R\"}"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"81cbca71-331f-49cd-8857-040081b640e0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"891c9455-5b6a-4753-95bb-aab9dccfd629","keyName":"e2e-sub-iso-3d0ee4","subscription":"e2e-shared-sub-cace0e","tenant":"e2e-shared-a-b5738f","userId":"891c9455-5b6a-4753-95bb-aab9dccfd629","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81cbca71-331f-49cd-8857-040081b640e0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81cbca71-331f-49cd-8857-040081b640e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81cbca71-331f-49cd-8857-040081b640e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/sub-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81cbca71-331f-49cd-8857-040081b640e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"81cbca71-331f-49cd-8857-040081b640e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81cbca71-331f-49cd-8857-040081b640e0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81cbca71-331f-49cd-8857-040081b640e0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-cace0e"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81cbca71-331f-49cd-8857-040081b640e0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81cbca71-331f-49cd-8857-040081b640e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81cbca71-331f-49cd-8857-040081b640e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"858f67ee-1e0d-41fb-9cbd-1000146801e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55326","PortSpecifier":{"PortValue":55326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"858f67ee-1e0d-41fb-9cbd-1000146801e0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"858f67ee-1e0d-41fb-9cbd-1000146801e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55326","PortSpecifier":{"PortValue":55326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243426,"nanos":707265906},"http":{"id":"858f67ee-1e0d-41fb-9cbd-1000146801e0","method":"POST","headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"858f67ee-1e0d-41fb-9cbd-1000146801e0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lufnU7SarZ6GtXXW_NG2V0IuZRwLTgIkw2KfNh80pALdB7TXHiJd8AAJivGP"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"858f67ee-1e0d-41fb-9cbd-1000146801e0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-61f04e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lufnU7SarZ6GtXXW_NG2V0IuZRwLTgIkw2KfNh80pALdB7TXHiJd8AAJivGP\"}"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"858f67ee-1e0d-41fb-9cbd-1000146801e0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-61f04e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"52f8819c-690e-411e-8863-ade9273ccaa0","keyName":"e2e-sub-iso-dbfb3d","subscription":"e2e-shared-sub-cace0e","tenant":"e2e-shared-b-61f04e","userId":"52f8819c-690e-411e-8863-ade9273ccaa0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"858f67ee-1e0d-41fb-9cbd-1000146801e0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"858f67ee-1e0d-41fb-9cbd-1000146801e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"858f67ee-1e0d-41fb-9cbd-1000146801e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"858f67ee-1e0d-41fb-9cbd-1000146801e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-61f04e/sub-test-model-61f04e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-61f04e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"858f67ee-1e0d-41fb-9cbd-1000146801e0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"858f67ee-1e0d-41fb-9cbd-1000146801e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"858f67ee-1e0d-41fb-9cbd-1000146801e0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"858f67ee-1e0d-41fb-9cbd-1000146801e0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-cace0e"}
{"level":"info","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"858f67ee-1e0d-41fb-9cbd-1000146801e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"858f67ee-1e0d-41fb-9cbd-1000146801e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d4fda27b4e2a4404c2cea71efc551bd20b3f89da6b577cb0b57732927f4b2a2"}
{"level":"info","ts":"2026-07-16T23:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b1b67d61ebb0fd3eb3708bcb4ddca503963c6747888bb3f78d3c9a3c78ed0b8"}
{"level":"info","ts":"2026-07-16T23:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de97d53e6373cf38cf40a5e23205000da03823d3e8df4db029ea70940a976691"}
{"level":"info","ts":"2026-07-16T23:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9b87d425d84316319e8022ee1cd995e9fa3f7fe576d332646f1144c8ec9cc4a"}
{"level":"info","ts":"2026-07-16T23:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/604423d401404599a24b96c4def95a683da9b664e9c844516ffd30420fb05de7"}
{"level":"info","ts":"2026-07-16T23:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c77066f23ec41c1c80cc0dfb5bb1992b2e2969e3d7c683f3af452262127331b5"}
{"level":"info","ts":"2026-07-16T23:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40aa5c8a324a06e3dbf7f92f5da83a9b9359089b16838291c4aa414c872096b3"}
{"level":"info","ts":"2026-07-16T23:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/960f1ce885c6a18dee7a470481f3189777d1a51d8155fb79bb0a8d0dc6ce4850"}
{"level":"info","ts":"2026-07-16T23:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/568dc038aa780f6ee258a99da90168fb2b6aad4c273216d190ac39a6ec3d3348"}
{"level":"info","ts":"2026-07-16T23:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e807f81e3d384db7dfb9705af00be8fa7b917ffa4ee39204859268fe7342d80"}
{"level":"info","ts":"2026-07-16T23:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed5d2c4c8f54e2ac5893f10a33a98095a4a496f401a86434801254acd6ce1474"}
{"level":"info","ts":"2026-07-16T23:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0caaf8bbea624ccab65092abfb3f25b981c7404b2e035d82023ce900902823fa"}
{"level":"info","ts":"2026-07-16T23:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91e5801929751e97d9b5ae68748384314ff9d604a84280829a8ea05feefecc5b"}
{"level":"info","ts":"2026-07-16T23:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/290f5dae9728d11d9ea9269d5e2e0ed9823f56a427b735f2cea58f43393046c0"}
{"level":"info","ts":"2026-07-16T23:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6ed2f0ee84d36beafc3650bc491bff1cc2fb556d4e77fdd82c5697f2fa72607"}
{"level":"info","ts":"2026-07-16T23:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/573017db2af45db3842fddaf1ff5c3af242fe985792cc5ae86cc24393bdfb27b"}
{"level":"debug","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8"}
{"level":"debug","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8"}
{"level":"debug","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8"}
{"level":"debug","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8"}
{"level":"debug","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8"}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab382ce64d42fb9655ee197fdbb899178c02744c80380b8bafab1d959aa1c934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab382ce64d42fb9655ee197fdbb899178c02744c80380b8bafab1d959aa1c934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab382ce64d42fb9655ee197fdbb899178c02744c80380b8bafab1d959aa1c934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab382ce64d42fb9655ee197fdbb899178c02744c80380b8bafab1d959aa1c934","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab382ce64d42fb9655ee197fdbb899178c02744c80380b8bafab1d959aa1c934"}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab382ce64d42fb9655ee197fdbb899178c02744c80380b8bafab1d959aa1c934","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab382ce64d42fb9655ee197fdbb899178c02744c80380b8bafab1d959aa1c934"}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab382ce64d42fb9655ee197fdbb899178c02744c80380b8bafab1d959aa1c934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab382ce64d42fb9655ee197fdbb899178c02744c80380b8bafab1d959aa1c934"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab382ce64d42fb9655ee197fdbb899178c02744c80380b8bafab1d959aa1c934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab382ce64d42fb9655ee197fdbb899178c02744c80380b8bafab1d959aa1c934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab382ce64d42fb9655ee197fdbb899178c02744c80380b8bafab1d959aa1c934"}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2"}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2"}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2"}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2"}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bcdc1e5ac9f5eaeebf6db34d16e4c29c290f6fcc483f7a3a34f81a5824256a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bcdc1e5ac9f5eaeebf6db34d16e4c29c290f6fcc483f7a3a34f81a5824256a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bcdc1e5ac9f5eaeebf6db34d16e4c29c290f6fcc483f7a3a34f81a5824256a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bcdc1e5ac9f5eaeebf6db34d16e4c29c290f6fcc483f7a3a34f81a5824256a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bcdc1e5ac9f5eaeebf6db34d16e4c29c290f6fcc483f7a3a34f81a5824256a4"}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bcdc1e5ac9f5eaeebf6db34d16e4c29c290f6fcc483f7a3a34f81a5824256a4"}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bcdc1e5ac9f5eaeebf6db34d16e4c29c290f6fcc483f7a3a34f81a5824256a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bcdc1e5ac9f5eaeebf6db34d16e4c29c290f6fcc483f7a3a34f81a5824256a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bcdc1e5ac9f5eaeebf6db34d16e4c29c290f6fcc483f7a3a34f81a5824256a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bcdc1e5ac9f5eaeebf6db34d16e4c29c290f6fcc483f7a3a34f81a5824256a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bcdc1e5ac9f5eaeebf6db34d16e4c29c290f6fcc483f7a3a34f81a5824256a4"}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812"}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812"}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812"}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c"}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed"}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812"}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c"}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed"}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfa2b90c81a044a65b86f6fc76f7c5a1f68eec0024c4c9b7e86a1023ea2ccf50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfa2b90c81a044a65b86f6fc76f7c5a1f68eec0024c4c9b7e86a1023ea2ccf50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812"}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfa2b90c81a044a65b86f6fc76f7c5a1f68eec0024c4c9b7e86a1023ea2ccf50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfa2b90c81a044a65b86f6fc76f7c5a1f68eec0024c4c9b7e86a1023ea2ccf50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c"}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfa2b90c81a044a65b86f6fc76f7c5a1f68eec0024c4c9b7e86a1023ea2ccf50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfa2b90c81a044a65b86f6fc76f7c5a1f68eec0024c4c9b7e86a1023ea2ccf50"}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfa2b90c81a044a65b86f6fc76f7c5a1f68eec0024c4c9b7e86a1023ea2ccf50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfa2b90c81a044a65b86f6fc76f7c5a1f68eec0024c4c9b7e86a1023ea2ccf50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:10:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfa2b90c81a044a65b86f6fc76f7c5a1f68eec0024c4c9b7e86a1023ea2ccf50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfa2b90c81a044a65b86f6fc76f7c5a1f68eec0024c4c9b7e86a1023ea2ccf50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfa2b90c81a044a65b86f6fc76f7c5a1f68eec0024c4c9b7e86a1023ea2ccf50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed"}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812"}
{"level":"debug","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfa2b90c81a044a65b86f6fc76f7c5a1f68eec0024c4c9b7e86a1023ea2ccf50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c"}
{"level":"info","ts":"2026-07-16T23:10:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfa2b90c81a044a65b86f6fc76f7c5a1f68eec0024c4c9b7e86a1023ea2ccf50"}
{"level":"debug","ts":"2026-07-16T23:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca92216706aac6087bc8100f0d1a10952af3d15fc36b751ac9035b1b6ae930b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca92216706aac6087bc8100f0d1a10952af3d15fc36b751ac9035b1b6ae930b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca92216706aac6087bc8100f0d1a10952af3d15fc36b751ac9035b1b6ae930b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca92216706aac6087bc8100f0d1a10952af3d15fc36b751ac9035b1b6ae930b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca92216706aac6087bc8100f0d1a10952af3d15fc36b751ac9035b1b6ae930b9"}
{"level":"debug","ts":"2026-07-16T23:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca92216706aac6087bc8100f0d1a10952af3d15fc36b751ac9035b1b6ae930b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca92216706aac6087bc8100f0d1a10952af3d15fc36b751ac9035b1b6ae930b9"}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca92216706aac6087bc8100f0d1a10952af3d15fc36b751ac9035b1b6ae930b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca92216706aac6087bc8100f0d1a10952af3d15fc36b751ac9035b1b6ae930b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca92216706aac6087bc8100f0d1a10952af3d15fc36b751ac9035b1b6ae930b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca92216706aac6087bc8100f0d1a10952af3d15fc36b751ac9035b1b6ae930b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca92216706aac6087bc8100f0d1a10952af3d15fc36b751ac9035b1b6ae930b9"}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2"}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2"}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2"}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1"}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2"}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1"}
{"level":"error","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2"}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1"}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2"}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052"}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1"}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2"}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052"}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1"}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052"}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20"}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20"}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20"}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817"}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817"}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817"}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20"}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817"}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a"}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a"}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a"}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e614db83a63fec51ab5a7690f2a3790cea539685b2d93d30be1edc608f80b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e614db83a63fec51ab5a7690f2a3790cea539685b2d93d30be1edc608f80b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e614db83a63fec51ab5a7690f2a3790cea539685b2d93d30be1edc608f80b6"}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21e614db83a63fec51ab5a7690f2a3790cea539685b2d93d30be1edc608f80b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e614db83a63fec51ab5a7690f2a3790cea539685b2d93d30be1edc608f80b6"}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e614db83a63fec51ab5a7690f2a3790cea539685b2d93d30be1edc608f80b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21e614db83a63fec51ab5a7690f2a3790cea539685b2d93d30be1edc608f80b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e614db83a63fec51ab5a7690f2a3790cea539685b2d93d30be1edc608f80b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21e614db83a63fec51ab5a7690f2a3790cea539685b2d93d30be1edc608f80b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a"}
{"level":"info","ts":"2026-07-16T23:11:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e614db83a63fec51ab5a7690f2a3790cea539685b2d93d30be1edc608f80b6"}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812"}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcfcdb1e10a2e47c49244ec23f0582a0efb00b1d9a3b13965c38942047b4bf36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcfcdb1e10a2e47c49244ec23f0582a0efb00b1d9a3b13965c38942047b4bf36"}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817"}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817"}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817"}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20"}
{"level":"info","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e"}
{"level":"info","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817"}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2"}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bcdc1e5ac9f5eaeebf6db34d16e4c29c290f6fcc483f7a3a34f81a5824256a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed"}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bcdc1e5ac9f5eaeebf6db34d16e4c29c290f6fcc483f7a3a34f81a5824256a4"}
{"level":"info","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed"}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8"}
{"level":"error","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab382ce64d42fb9655ee197fdbb899178c02744c80380b8bafab1d959aa1c934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed"}
{"level":"error","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab382ce64d42fb9655ee197fdbb899178c02744c80380b8bafab1d959aa1c934"}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e70c9cbe3e4b0e30ce5efd9871ea80701ae3353273d3ec4c3e3ed6fe0c9d752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed"}
{"level":"error","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:11:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e70c9cbe3e4b0e30ce5efd9871ea80701ae3353273d3ec4c3e3ed6fe0c9d752"}
{"level":"error","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c"}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052"}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed"}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21e614db83a63fec51ab5a7690f2a3790cea539685b2d93d30be1edc608f80b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e614db83a63fec51ab5a7690f2a3790cea539685b2d93d30be1edc608f80b6"}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1"}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04cc5d660dd3de4b7a7582a5a4ec7d7a7dd5cd88e069a8e53c7339120519802c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2"}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca92216706aac6087bc8100f0d1a10952af3d15fc36b751ac9035b1b6ae930b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc"}
{"level":"debug","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfa2b90c81a044a65b86f6fc76f7c5a1f68eec0024c4c9b7e86a1023ea2ccf50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62"}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04cc5d660dd3de4b7a7582a5a4ec7d7a7dd5cd88e069a8e53c7339120519802c"}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a"}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca92216706aac6087bc8100f0d1a10952af3d15fc36b751ac9035b1b6ae930b9"}
{"level":"info","ts":"2026-07-16T23:11:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfa2b90c81a044a65b86f6fc76f7c5a1f68eec0024c4c9b7e86a1023ea2ccf50"}
{"level":"info","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"168f0a0b-9790-45c2-8a02-fbc4f9338ff0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60754","PortSpecifier":{"PortValue":60754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"168f0a0b-9790-45c2-8a02-fbc4f9338ff0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"168f0a0b-9790-45c2-8a02-fbc4f9338ff0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60754","PortSpecifier":{"PortValue":60754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243509,"nanos":336634747},"http":{"id":"168f0a0b-9790-45c2-8a02-fbc4f9338ff0","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"168f0a0b-9790-45c2-8a02-fbc4f9338ff0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"168f0a0b-9790-45c2-8a02-fbc4f9338ff0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"168f0a0b-9790-45c2-8a02-fbc4f9338ff0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.125:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"168f0a0b-9790-45c2-8a02-fbc4f9338ff0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"168f0a0b-9790-45c2-8a02-fbc4f9338ff0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"168f0a0b-9790-45c2-8a02-fbc4f9338ff0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"168f0a0b-9790-45c2-8a02-fbc4f9338ff0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"168f0a0b-9790-45c2-8a02-fbc4f9338ff0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"168f0a0b-9790-45c2-8a02-fbc4f9338ff0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"168f0a0b-9790-45c2-8a02-fbc4f9338ff0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"168f0a0b-9790-45c2-8a02-fbc4f9338ff0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9caf6125-92cc-4121-af43-ae08fd671c66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48186","PortSpecifier":{"PortValue":48186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9caf6125-92cc-4121-af43-ae08fd671c66","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9caf6125-92cc-4121-af43-ae08fd671c66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48186","PortSpecifier":{"PortValue":48186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243509,"nanos":375898997},"http":{"id":"9caf6125-92cc-4121-af43-ae08fd671c66","method":"POST","headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9caf6125-92cc-4121-af43-ae08fd671c66","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9caf6125-92cc-4121-af43-ae08fd671c66","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9caf6125-92cc-4121-af43-ae08fd671c66","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.127:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9caf6125-92cc-4121-af43-ae08fd671c66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9caf6125-92cc-4121-af43-ae08fd671c66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9caf6125-92cc-4121-af43-ae08fd671c66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-61f04e/rate-test-model-61f04e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-61f04e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9caf6125-92cc-4121-af43-ae08fd671c66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9caf6125-92cc-4121-af43-ae08fd671c66","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9caf6125-92cc-4121-af43-ae08fd671c66","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9caf6125-92cc-4121-af43-ae08fd671c66","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9caf6125-92cc-4121-af43-ae08fd671c66","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60756","PortSpecifier":{"PortValue":60756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7210d96b-39f8-4771-99a5-fe597139ea8e","method":"POST","path":"/ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f/v1/completions","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60756","PortSpecifier":{"PortValue":60756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243509,"nanos":415219678},"http":{"id":"7210d96b-39f8-4771-99a5-fe597139ea8e","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GalZp0xjm0aMz7m3_ep1VMyggQJF3hEq0Apemsq4KSLqJSR9nCWrBKbwVJ8a"}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GalZp0xjm0aMz7m3_ep1VMyggQJF3hEq0Apemsq4KSLqJSR9nCWrBKbwVJ8a\"}"}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62b9e7a6-ab82-4c65-80e8-3b3719800474","keyName":"e2e-rate-a-dd05be","subscription":"e2e-rate-iso-a-dd05be","tenant":"e2e-shared-a-b5738f","userId":"62b9e7a6-ab82-4c65-80e8-3b3719800474","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f\",\"requestedSubscription\":\"e2e-rate-iso-a-dd05be\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b5738f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dd05be","namespace":"ai-tenant-e2e-shared-a-b5738f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dd05be"}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62b9e7a6-ab82-4c65-80e8-3b3719800474","keyName":"e2e-rate-a-dd05be","selected_subscription":"e2e-rate-iso-a-dd05be","selected_subscription_key":"ai-tenant-e2e-shared-a-b5738f/e2e-rate-iso-a-dd05be@ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b5738f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dd05be","namespace":"ai-tenant-e2e-shared-a-b5738f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:11:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7210d96b-39f8-4771-99a5-fe597139ea8e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60760","PortSpecifier":{"PortValue":60760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7201fb8e-ca69-4cec-84a3-946a48352a17","method":"POST","path":"/ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f/v1/completions","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60760","PortSpecifier":{"PortValue":60760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243510,"nanos":475906356},"http":{"id":"7201fb8e-ca69-4cec-84a3-946a48352a17","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GalZp0xjm0aMz7m3_ep1VMyggQJF3hEq0Apemsq4KSLqJSR9nCWrBKbwVJ8a"}
{"level":"debug","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GalZp0xjm0aMz7m3_ep1VMyggQJF3hEq0Apemsq4KSLqJSR9nCWrBKbwVJ8a\"}"}
{"level":"debug","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62b9e7a6-ab82-4c65-80e8-3b3719800474","keyName":"e2e-rate-a-dd05be","subscription":"e2e-rate-iso-a-dd05be","tenant":"e2e-shared-a-b5738f","userId":"62b9e7a6-ab82-4c65-80e8-3b3719800474","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f\",\"requestedSubscription\":\"e2e-rate-iso-a-dd05be\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b5738f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dd05be","namespace":"ai-tenant-e2e-shared-a-b5738f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dd05be"}
{"level":"debug","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62b9e7a6-ab82-4c65-80e8-3b3719800474","keyName":"e2e-rate-a-dd05be","selected_subscription":"e2e-rate-iso-a-dd05be","selected_subscription_key":"ai-tenant-e2e-shared-a-b5738f/e2e-rate-iso-a-dd05be@ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b5738f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dd05be","namespace":"ai-tenant-e2e-shared-a-b5738f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:11:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7201fb8e-ca69-4cec-84a3-946a48352a17","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3216d151-44e4-4adf-a363-efd75615fd34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60766","PortSpecifier":{"PortValue":60766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3216d151-44e4-4adf-a363-efd75615fd34","method":"POST","path":"/ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f/v1/completions","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3216d151-44e4-4adf-a363-efd75615fd34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60766","PortSpecifier":{"PortValue":60766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243511,"nanos":518292895},"http":{"id":"3216d151-44e4-4adf-a363-efd75615fd34","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3216d151-44e4-4adf-a363-efd75615fd34","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GalZp0xjm0aMz7m3_ep1VMyggQJF3hEq0Apemsq4KSLqJSR9nCWrBKbwVJ8a"}
{"level":"debug","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3216d151-44e4-4adf-a363-efd75615fd34","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GalZp0xjm0aMz7m3_ep1VMyggQJF3hEq0Apemsq4KSLqJSR9nCWrBKbwVJ8a\"}"}
{"level":"debug","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3216d151-44e4-4adf-a363-efd75615fd34","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62b9e7a6-ab82-4c65-80e8-3b3719800474","keyName":"e2e-rate-a-dd05be","subscription":"e2e-rate-iso-a-dd05be","tenant":"e2e-shared-a-b5738f","userId":"62b9e7a6-ab82-4c65-80e8-3b3719800474","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3216d151-44e4-4adf-a363-efd75615fd34","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f\",\"requestedSubscription\":\"e2e-rate-iso-a-dd05be\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3216d151-44e4-4adf-a363-efd75615fd34","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b5738f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dd05be","namespace":"ai-tenant-e2e-shared-a-b5738f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3216d151-44e4-4adf-a363-efd75615fd34","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3216d151-44e4-4adf-a363-efd75615fd34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3216d151-44e4-4adf-a363-efd75615fd34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3216d151-44e4-4adf-a363-efd75615fd34","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3216d151-44e4-4adf-a363-efd75615fd34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3216d151-44e4-4adf-a363-efd75615fd34","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3216d151-44e4-4adf-a363-efd75615fd34","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dd05be"}
{"level":"debug","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3216d151-44e4-4adf-a363-efd75615fd34","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3216d151-44e4-4adf-a363-efd75615fd34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62b9e7a6-ab82-4c65-80e8-3b3719800474","keyName":"e2e-rate-a-dd05be","selected_subscription":"e2e-rate-iso-a-dd05be","selected_subscription_key":"ai-tenant-e2e-shared-a-b5738f/e2e-rate-iso-a-dd05be@ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b5738f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dd05be","namespace":"ai-tenant-e2e-shared-a-b5738f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3216d151-44e4-4adf-a363-efd75615fd34","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:11:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3216d151-44e4-4adf-a363-efd75615fd34","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0180ef63-edd4-4506-8e45-32acd42c1ec4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51884","PortSpecifier":{"PortValue":51884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0180ef63-edd4-4506-8e45-32acd42c1ec4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0180ef63-edd4-4506-8e45-32acd42c1ec4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51884","PortSpecifier":{"PortValue":51884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243524,"nanos":278477770},"http":{"id":"0180ef63-edd4-4506-8e45-32acd42c1ec4","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0180ef63-edd4-4506-8e45-32acd42c1ec4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0180ef63-edd4-4506-8e45-32acd42c1ec4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0180ef63-edd4-4506-8e45-32acd42c1ec4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.125:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0180ef63-edd4-4506-8e45-32acd42c1ec4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0180ef63-edd4-4506-8e45-32acd42c1ec4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0180ef63-edd4-4506-8e45-32acd42c1ec4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0180ef63-edd4-4506-8e45-32acd42c1ec4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0180ef63-edd4-4506-8e45-32acd42c1ec4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0180ef63-edd4-4506-8e45-32acd42c1ec4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0180ef63-edd4-4506-8e45-32acd42c1ec4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0180ef63-edd4-4506-8e45-32acd42c1ec4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bc81d01-6220-4625-b979-ea3b4153ea43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46710","PortSpecifier":{"PortValue":46710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8bc81d01-6220-4625-b979-ea3b4153ea43","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bc81d01-6220-4625-b979-ea3b4153ea43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46710","PortSpecifier":{"PortValue":46710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243524,"nanos":315076584},"http":{"id":"8bc81d01-6220-4625-b979-ea3b4153ea43","method":"POST","headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8bc81d01-6220-4625-b979-ea3b4153ea43","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8bc81d01-6220-4625-b979-ea3b4153ea43","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"]}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8bc81d01-6220-4625-b979-ea3b4153ea43","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4b4408d5ea8f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=00f6e27b-0765-43be-950c-1332e0fcb23e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a2563d0a-c0f6-4051-8d51-72b3cd0217c1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.127:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bc81d01-6220-4625-b979-ea3b4153ea43","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bc81d01-6220-4625-b979-ea3b4153ea43","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bc81d01-6220-4625-b979-ea3b4153ea43","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-61f04e/rate-test-model-61f04e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-61f04e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8bc81d01-6220-4625-b979-ea3b4153ea43","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bc81d01-6220-4625-b979-ea3b4153ea43","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bc81d01-6220-4625-b979-ea3b4153ea43","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bc81d01-6220-4625-b979-ea3b4153ea43","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bc81d01-6220-4625-b979-ea3b4153ea43","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51898","PortSpecifier":{"PortValue":51898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0438656-efff-42e2-b2ec-cf79f0990a34","method":"POST","path":"/ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f/v1/completions","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51898","PortSpecifier":{"PortValue":51898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243524,"nanos":356873205},"http":{"id":"d0438656-efff-42e2-b2ec-cf79f0990a34","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NjscJudpXepWWESr_tq6eRuizofVXK3pUdx7unkljQOxPrplTT4l1gYbBeml"}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NjscJudpXepWWESr_tq6eRuizofVXK3pUdx7unkljQOxPrplTT4l1gYbBeml\"}"}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"95733931-7c1f-440f-a770-5d8d0af30f3a","keyName":"e2e-rate-a-fd77f5","subscription":"e2e-rate-iso-a-fd77f5","tenant":"e2e-shared-a-b5738f","userId":"95733931-7c1f-440f-a770-5d8d0af30f3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f\",\"requestedSubscription\":\"e2e-rate-iso-a-fd77f5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b5738f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd77f5","namespace":"ai-tenant-e2e-shared-a-b5738f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fd77f5"}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"95733931-7c1f-440f-a770-5d8d0af30f3a","keyName":"e2e-rate-a-fd77f5","selected_subscription":"e2e-rate-iso-a-fd77f5","selected_subscription_key":"ai-tenant-e2e-shared-a-b5738f/e2e-rate-iso-a-fd77f5@ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b5738f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd77f5","namespace":"ai-tenant-e2e-shared-a-b5738f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:12:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0438656-efff-42e2-b2ec-cf79f0990a34","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51904","PortSpecifier":{"PortValue":51904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","method":"POST","path":"/ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f/v1/completions","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51904","PortSpecifier":{"PortValue":51904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243525,"nanos":392838971},"http":{"id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NjscJudpXepWWESr_tq6eRuizofVXK3pUdx7unkljQOxPrplTT4l1gYbBeml"}
{"level":"debug","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NjscJudpXepWWESr_tq6eRuizofVXK3pUdx7unkljQOxPrplTT4l1gYbBeml\"}"}
{"level":"debug","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"95733931-7c1f-440f-a770-5d8d0af30f3a","keyName":"e2e-rate-a-fd77f5","subscription":"e2e-rate-iso-a-fd77f5","tenant":"e2e-shared-a-b5738f","userId":"95733931-7c1f-440f-a770-5d8d0af30f3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f\",\"requestedSubscription\":\"e2e-rate-iso-a-fd77f5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b5738f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd77f5","namespace":"ai-tenant-e2e-shared-a-b5738f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fd77f5"}
{"level":"debug","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"95733931-7c1f-440f-a770-5d8d0af30f3a","keyName":"e2e-rate-a-fd77f5","selected_subscription":"e2e-rate-iso-a-fd77f5","selected_subscription_key":"ai-tenant-e2e-shared-a-b5738f/e2e-rate-iso-a-fd77f5@ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b5738f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd77f5","namespace":"ai-tenant-e2e-shared-a-b5738f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:12:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53cb1710-414c-49d5-8369-86e3adf0f6c1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51918","PortSpecifier":{"PortValue":51918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"130fc055-55d2-4dc8-956b-702a59ffb668","method":"POST","path":"/ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f/v1/completions","host":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51918","PortSpecifier":{"PortValue":51918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.125:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243526,"nanos":427462446},"http":{"id":"130fc055-55d2-4dc8-956b-702a59ffb668","method":"POST","headers":{":authority":"e2e-shared-a-b5738f.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NjscJudpXepWWESr_tq6eRuizofVXK3pUdx7unkljQOxPrplTT4l1gYbBeml"}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NjscJudpXepWWESr_tq6eRuizofVXK3pUdx7unkljQOxPrplTT4l1gYbBeml\"}"}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"95733931-7c1f-440f-a770-5d8d0af30f3a","keyName":"e2e-rate-a-fd77f5","subscription":"e2e-rate-iso-a-fd77f5","tenant":"e2e-shared-a-b5738f","userId":"95733931-7c1f-440f-a770-5d8d0af30f3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f\",\"requestedSubscription\":\"e2e-rate-iso-a-fd77f5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b5738f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b5738f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd77f5","namespace":"ai-tenant-e2e-shared-a-b5738f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b5738f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fd77f5"}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"95733931-7c1f-440f-a770-5d8d0af30f3a","keyName":"e2e-rate-a-fd77f5","selected_subscription":"e2e-rate-iso-a-fd77f5","selected_subscription_key":"ai-tenant-e2e-shared-a-b5738f/e2e-rate-iso-a-fd77f5@ai-tenant-e2e-shared-a-b5738f/rate-test-model-b5738f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b5738f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd77f5","namespace":"ai-tenant-e2e-shared-a-b5738f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"130fc055-55d2-4dc8-956b-702a59ffb668","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46724","PortSpecifier":{"PortValue":46724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","method":"POST","path":"/ai-tenant-e2e-shared-b-61f04e/rate-test-model-61f04e/v1/completions","host":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46724","PortSpecifier":{"PortValue":46724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.127:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784243526,"nanos":456017416},"http":{"id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","method":"POST","headers":{":authority":"e2e-shared-b-61f04e.apps.7228e799-8add-4bd6-aae9-4b4408d5ea8f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-61f04e/rate-test-model-61f04e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hJSLVRiQYNLh84po_ohAkvgH0TcospAmURfH2aXgceKCsS62CfoGmoa2PmmH"}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-61f04e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hJSLVRiQYNLh84po_ohAkvgH0TcospAmURfH2aXgceKCsS62CfoGmoa2PmmH\"}"}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-61f04e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1c82eec4-a1af-4b84-b20a-deb1ccc30f7f","keyName":"e2e-rate-b-fd77f5","subscription":"e2e-rate-iso-b-fd77f5","tenant":"e2e-shared-b-61f04e","userId":"1c82eec4-a1af-4b84-b20a-deb1ccc30f7f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-61f04e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-61f04e/rate-test-model-61f04e\",\"requestedSubscription\":\"e2e-rate-iso-b-fd77f5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-61f04e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-61f04e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fd77f5","namespace":"ai-tenant-e2e-shared-b-61f04e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-61f04e/rate-test-model-61f04e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-61f04e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-fd77f5"}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1c82eec4-a1af-4b84-b20a-deb1ccc30f7f","keyName":"e2e-rate-b-fd77f5","selected_subscription":"e2e-rate-iso-b-fd77f5","selected_subscription_key":"ai-tenant-e2e-shared-b-61f04e/e2e-rate-iso-b-fd77f5@ai-tenant-e2e-shared-b-61f04e/rate-test-model-61f04e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-61f04e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fd77f5","namespace":"ai-tenant-e2e-shared-b-61f04e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:12:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc8d75cb-0a59-45ae-84ea-825594c3721e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07724b7732ee236dc0fa188442e752becde7ca3d6c7e4986dfe5e97b9933f4c2"}
{"level":"info","ts":"2026-07-16T23:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bcdc1e5ac9f5eaeebf6db34d16e4c29c290f6fcc483f7a3a34f81a5824256a4"}
{"level":"info","ts":"2026-07-16T23:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/844d41098e854a83f93b303e0bd5f222b802397a8ee84da1aa6ed963abe1eb9c"}
{"level":"info","ts":"2026-07-16T23:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6266e278481a50669eafab6d8f30645a0015e851aaf79282fd82a0774f1b6817"}
{"level":"info","ts":"2026-07-16T23:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/088feca766028a2bcdd3e8fe221b611781e47c317fb497714a5479c40352d0ed"}
{"level":"info","ts":"2026-07-16T23:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78dea8914bced0d3c10a09df27673f18a25be24cde75babe52dc647bf74616e1"}
{"level":"info","ts":"2026-07-16T23:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21e614db83a63fec51ab5a7690f2a3790cea539685b2d93d30be1edc608f80b6"}
{"level":"info","ts":"2026-07-16T23:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ca78502bed3a81e60d285a736d3a84b49ca20ad933950423a64e09e109fb3a8"}
{"level":"info","ts":"2026-07-16T23:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10649d843389dd28ad5b1e631fcc5bc049bcb4bc9d41feb4eb852c076f192812"}
{"level":"info","ts":"2026-07-16T23:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fec1bbd587259be1c2fcc61e8207d8e41e5a9024db145836327e8f66eae2bb20"}
{"level":"info","ts":"2026-07-16T23:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1d8e7c4425649b084d2e857db270276930e6d8c733d48f394d1067648502e7a"}
{"level":"info","ts":"2026-07-16T23:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca92216706aac6087bc8100f0d1a10952af3d15fc36b751ac9035b1b6ae930b9"}
{"level":"info","ts":"2026-07-16T23:12:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6afb86f00ad004a63f3f346e38968d204623090081ae474399c1a9ba91ab42d2"}
{"level":"info","ts":"2026-07-16T23:12:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6e75435c26f563ba65ca431649a0345eb2cee593e353315c24fec0c44847052"}
{"level":"info","ts":"2026-07-16T23:12:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfa2b90c81a044a65b86f6fc76f7c5a1f68eec0024c4c9b7e86a1023ea2ccf50"}
{"level":"info","ts":"2026-07-16T23:12:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab382ce64d42fb9655ee197fdbb899178c02744c80380b8bafab1d959aa1c934"}
{"level":"info","ts":"2026-07-16T23:12:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de67ce047633201d2d5777532a05e87fda33caba22f3507a2540c5e7fe325158"}
{"level":"info","ts":"2026-07-16T23:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e70c9cbe3e4b0e30ce5efd9871ea80701ae3353273d3ec4c3e3ed6fe0c9d752"}
{"level":"info","ts":"2026-07-16T23:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcfcdb1e10a2e47c49244ec23f0582a0efb00b1d9a3b13965c38942047b4bf36"}
{"level":"info","ts":"2026-07-16T23:12:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04cc5d660dd3de4b7a7582a5a4ec7d7a7dd5cd88e069a8e53c7339120519802c"}
{"level":"info","ts":"2026-07-16T23:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6bb0bd789f16328eee3cc241f3471933e0ff58507603769d74ab1f0caf223bb"}
{"level":"info","ts":"2026-07-16T23:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa1495b5a4324ec5aa2b8fd51d8b572a31e034c125dce36f23ba9485874bb5dc"}
{"level":"info","ts":"2026-07-16T23:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ed4666bdcb489f97ec52244e73b836bcfcf9488cc9b10e7bd40695874fa4d3e"}
{"level":"info","ts":"2026-07-16T23:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4853db7f012bdcbf8a73dbd6d036c0d0ff0bfb12c2ded5c568ebb4646325af62"}