--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f39bf2d8-72bf-47ea-a250-3d030dff25e8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f43c2cd7721d86129532a8a37cfab33ffd129ad357dc22d54abf3bf0b9126db2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-cded59.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f39bf2d8-72bf-47ea-a250-3d030dff25e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f39bf2d8-72bf-47ea-a250-3d030dff25e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f39bf2d8-72bf-47ea-a250-3d030dff25e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-cded59/test-model-cded59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f39bf2d8-72bf-47ea-a250-3d030dff25e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f39bf2d8-72bf-47ea-a250-3d030dff25e8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f39bf2d8-72bf-47ea-a250-3d030dff25e8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f39bf2d8-72bf-47ea-a250-3d030dff25e8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f39bf2d8-72bf-47ea-a250-3d030dff25e8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a27e165-e9f1-41d2-96f9-0959e02a67c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60620","PortSpecifier":{"PortValue":60620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a27e165-e9f1-41d2-96f9-0959e02a67c9","method":"POST","path":"/ai-tenant-e2e-inf-b-0ec7c3/test-model-0ec7c3/v1/chat/completions","host":"e2e-inf-b-0ec7c3.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a27e165-e9f1-41d2-96f9-0959e02a67c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60620","PortSpecifier":{"PortValue":60620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384032,"nanos":535696902},"http":{"id":"9a27e165-e9f1-41d2-96f9-0959e02a67c9","method":"POST","headers":{":authority":"e2e-inf-b-0ec7c3.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-0ec7c3/test-model-0ec7c3/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a27e165-e9f1-41d2-96f9-0959e02a67c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KXRxE1KWH0y2mNIR_rDO6ODGIF5zuCjogY8kjk3A9GPfq1ObmsHhjR3JIvxw"}
{"level":"debug","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a27e165-e9f1-41d2-96f9-0959e02a67c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-0ec7c3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KXRxE1KWH0y2mNIR_rDO6ODGIF5zuCjogY8kjk3A9GPfq1ObmsHhjR3JIvxw\"}"}
{"level":"debug","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a27e165-e9f1-41d2-96f9-0959e02a67c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-0ec7c3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"9a27e165-e9f1-41d2-96f9-0959e02a67c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-0ec7c3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a27e165-e9f1-41d2-96f9-0959e02a67c9","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"869e9f1a30b6a38489403957bc6722dc4084f5ccf42b8bec1c8e1fd9f883d9ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-0ec7c3.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-0ec7c3/test-model-0ec7c3/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a27e165-e9f1-41d2-96f9-0959e02a67c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"9a27e165-e9f1-41d2-96f9-0959e02a67c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a27e165-e9f1-41d2-96f9-0959e02a67c9","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T00:27:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a27e165-e9f1-41d2-96f9-0959e02a67c9","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbf6684ba3a9766c58ee57655fde0e1d82b28bc77b17913b14a4df5541f580b5"}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/770ad9ec174ef78f0f86fb0770048c8880612d4efb9581a7377ef6d907b9a88f"}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2e38587d573113dd1eae2b2bf91d057dddb51de00f05fc9135c7c8708c9aea0"}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f43c2cd7721d86129532a8a37cfab33ffd129ad357dc22d54abf3bf0b9126db2"}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ab8e0413f498a434e12f3ea788b8cfc08c76cc0eb2068a7b60de7eaa56344a8"}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/180477ff8f79ea272d82f45656f01f8b7ae46a3cff68e88823c0be6609d16fb8"}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2763c1babfe91055f781d3b118784b0cbb82f78710139be6d2b3ae726d029856"}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47cc8510a41cf3cd26f353dfbb233cdc9512355ee355de0a8ab8377c116f16ba"}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd22f50e49dc9cd4ad912ad0bdc1aae8d2bc78f8f59cce5472b15756bc023144"}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d25398a83f3a2547eafef385ee4cf28e464e30852d51d1d516a7689ab3455d1f"}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3426f7842abaf20d2c3d27ff515b5ec23b7cef5cefefe66b510e4332d568d713"}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b545fc5509a3c51511b74b53480f99f7183043f0945e2ec3c3ae60b66f40b712"}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bfa47f55a0fe2f5643e3b2e9eecf6eff0681739ec405ea7144a802246fd78a3"}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/860c1ceefc4cd8f13c7e063aa364faa3864d3e47cf537a9a462465e7473b2408"}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b15673c9197c7775b32f1dd1f858a724264fdeaf871b5e37577be62e1fa448e"}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89ab31b2dfa46700099c3b34cd112205bf320dcf7a0193f1c9007de8d230e057"}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/869e9f1a30b6a38489403957bc6722dc4084f5ccf42b8bec1c8e1fd9f883d9ac"}
{"level":"info","ts":"2026-07-07T00:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40b11e98a7764335c46462092a60c5c07841e3cbeffc1781d060d3be98832c3a"}
{"level":"info","ts":"2026-07-07T00:28:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba47179b1893f1aef900af2168505990294922689cfa83fa022ac3ed4f26c962"}
{"level":"info","ts":"2026-07-07T00:28:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0fa3671a993fbac486df126ec012e7b70deecb2a4eba7c2209e32c4dc37fd98"}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e784fb000575d0b370266a67d544f2d64f18e91a96e838f01b45b5d0029262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16e784fb000575d0b370266a67d544f2d64f18e91a96e838f01b45b5d0029262","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16e784fb000575d0b370266a67d544f2d64f18e91a96e838f01b45b5d0029262","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16e784fb000575d0b370266a67d544f2d64f18e91a96e838f01b45b5d0029262","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16e784fb000575d0b370266a67d544f2d64f18e91a96e838f01b45b5d0029262"}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16e784fb000575d0b370266a67d544f2d64f18e91a96e838f01b45b5d0029262","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16e784fb000575d0b370266a67d544f2d64f18e91a96e838f01b45b5d0029262"}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e784fb000575d0b370266a67d544f2d64f18e91a96e838f01b45b5d0029262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16e784fb000575d0b370266a67d544f2d64f18e91a96e838f01b45b5d0029262"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16e784fb000575d0b370266a67d544f2d64f18e91a96e838f01b45b5d0029262","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16e784fb000575d0b370266a67d544f2d64f18e91a96e838f01b45b5d0029262","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16e784fb000575d0b370266a67d544f2d64f18e91a96e838f01b45b5d0029262"}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd"}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd"}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd"}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd"}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd"}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd"}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd"}
{"level":"debug","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321d9be6a417ede89301b5c3ae0a4dc6dd7408f1ae0365d276f6ba1a9000b240","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321d9be6a417ede89301b5c3ae0a4dc6dd7408f1ae0365d276f6ba1a9000b240","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321d9be6a417ede89301b5c3ae0a4dc6dd7408f1ae0365d276f6ba1a9000b240","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321d9be6a417ede89301b5c3ae0a4dc6dd7408f1ae0365d276f6ba1a9000b240","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321d9be6a417ede89301b5c3ae0a4dc6dd7408f1ae0365d276f6ba1a9000b240"}
{"level":"debug","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321d9be6a417ede89301b5c3ae0a4dc6dd7408f1ae0365d276f6ba1a9000b240","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321d9be6a417ede89301b5c3ae0a4dc6dd7408f1ae0365d276f6ba1a9000b240"}
{"level":"debug","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321d9be6a417ede89301b5c3ae0a4dc6dd7408f1ae0365d276f6ba1a9000b240","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["321d9be6a417ede89301b5c3ae0a4dc6dd7408f1ae0365d276f6ba1a9000b240"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321d9be6a417ede89301b5c3ae0a4dc6dd7408f1ae0365d276f6ba1a9000b240","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6909bbb8f001e2e43e252287fcf40d6c9a4978994483fb1438fc22cc60939aac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6909bbb8f001e2e43e252287fcf40d6c9a4978994483fb1438fc22cc60939aac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321d9be6a417ede89301b5c3ae0a4dc6dd7408f1ae0365d276f6ba1a9000b240","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6909bbb8f001e2e43e252287fcf40d6c9a4978994483fb1438fc22cc60939aac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6909bbb8f001e2e43e252287fcf40d6c9a4978994483fb1438fc22cc60939aac"}
{"level":"debug","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6909bbb8f001e2e43e252287fcf40d6c9a4978994483fb1438fc22cc60939aac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6909bbb8f001e2e43e252287fcf40d6c9a4978994483fb1438fc22cc60939aac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6909bbb8f001e2e43e252287fcf40d6c9a4978994483fb1438fc22cc60939aac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6909bbb8f001e2e43e252287fcf40d6c9a4978994483fb1438fc22cc60939aac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321d9be6a417ede89301b5c3ae0a4dc6dd7408f1ae0365d276f6ba1a9000b240"}
{"level":"info","ts":"2026-07-07T00:28:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6909bbb8f001e2e43e252287fcf40d6c9a4978994483fb1438fc22cc60939aac"}
{"level":"info","ts":"2026-07-07T00:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27476bc48066becfec7a2713b9aa61e2ba9a9a4059139486ab48e2746aeb84fd"}
{"level":"info","ts":"2026-07-07T00:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16e784fb000575d0b370266a67d544f2d64f18e91a96e838f01b45b5d0029262"}
{"level":"info","ts":"2026-07-07T00:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/321d9be6a417ede89301b5c3ae0a4dc6dd7408f1ae0365d276f6ba1a9000b240"}
{"level":"info","ts":"2026-07-07T00:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6909bbb8f001e2e43e252287fcf40d6c9a4978994483fb1438fc22cc60939aac"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7695134f0c96bcd7d155de46528fe6447254ece727a178e8cff39052bc56e284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7695134f0c96bcd7d155de46528fe6447254ece727a178e8cff39052bc56e284","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7695134f0c96bcd7d155de46528fe6447254ece727a178e8cff39052bc56e284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7695134f0c96bcd7d155de46528fe6447254ece727a178e8cff39052bc56e284"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7695134f0c96bcd7d155de46528fe6447254ece727a178e8cff39052bc56e284","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7695134f0c96bcd7d155de46528fe6447254ece727a178e8cff39052bc56e284"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7695134f0c96bcd7d155de46528fe6447254ece727a178e8cff39052bc56e284","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7695134f0c96bcd7d155de46528fe6447254ece727a178e8cff39052bc56e284"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7695134f0c96bcd7d155de46528fe6447254ece727a178e8cff39052bc56e284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7695134f0c96bcd7d155de46528fe6447254ece727a178e8cff39052bc56e284"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7695134f0c96bcd7d155de46528fe6447254ece727a178e8cff39052bc56e284","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7695134f0c96bcd7d155de46528fe6447254ece727a178e8cff39052bc56e284"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7695134f0c96bcd7d155de46528fe6447254ece727a178e8cff39052bc56e284","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2dde3ca2f06f76848ccabab93fc2aebf0ac561f738d5e4915006b2ad0271276","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2dde3ca2f06f76848ccabab93fc2aebf0ac561f738d5e4915006b2ad0271276","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2dde3ca2f06f76848ccabab93fc2aebf0ac561f738d5e4915006b2ad0271276"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2dde3ca2f06f76848ccabab93fc2aebf0ac561f738d5e4915006b2ad0271276","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2dde3ca2f06f76848ccabab93fc2aebf0ac561f738d5e4915006b2ad0271276"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2dde3ca2f06f76848ccabab93fc2aebf0ac561f738d5e4915006b2ad0271276","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2dde3ca2f06f76848ccabab93fc2aebf0ac561f738d5e4915006b2ad0271276","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2dde3ca2f06f76848ccabab93fc2aebf0ac561f738d5e4915006b2ad0271276"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf"}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f36f70eab74c1146080b8bd884a3dcb5ffa50f9fa78e51ff333398502162e80a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f36f70eab74c1146080b8bd884a3dcb5ffa50f9fa78e51ff333398502162e80a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f36f70eab74c1146080b8bd884a3dcb5ffa50f9fa78e51ff333398502162e80a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f36f70eab74c1146080b8bd884a3dcb5ffa50f9fa78e51ff333398502162e80a"}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f36f70eab74c1146080b8bd884a3dcb5ffa50f9fa78e51ff333398502162e80a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f36f70eab74c1146080b8bd884a3dcb5ffa50f9fa78e51ff333398502162e80a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f36f70eab74c1146080b8bd884a3dcb5ffa50f9fa78e51ff333398502162e80a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f36f70eab74c1146080b8bd884a3dcb5ffa50f9fa78e51ff333398502162e80a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f36f70eab74c1146080b8bd884a3dcb5ffa50f9fa78e51ff333398502162e80a"}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f36f70eab74c1146080b8bd884a3dcb5ffa50f9fa78e51ff333398502162e80a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f36f70eab74c1146080b8bd884a3dcb5ffa50f9fa78e51ff333398502162e80a"}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb"}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb"}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb"}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c"}
{"level":"error","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c"}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c"}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c"}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682"}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682"}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682"}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682"}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a123cf2a8231b5bef56054ddaa2746801021c680357e6286d65724487556743c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682"}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a123cf2a8231b5bef56054ddaa2746801021c680357e6286d65724487556743c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a123cf2a8231b5bef56054ddaa2746801021c680357e6286d65724487556743c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a123cf2a8231b5bef56054ddaa2746801021c680357e6286d65724487556743c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a123cf2a8231b5bef56054ddaa2746801021c680357e6286d65724487556743c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a123cf2a8231b5bef56054ddaa2746801021c680357e6286d65724487556743c"}
{"level":"error","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a123cf2a8231b5bef56054ddaa2746801021c680357e6286d65724487556743c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a123cf2a8231b5bef56054ddaa2746801021c680357e6286d65724487556743c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a123cf2a8231b5bef56054ddaa2746801021c680357e6286d65724487556743c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a123cf2a8231b5bef56054ddaa2746801021c680357e6286d65724487556743c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a123cf2a8231b5bef56054ddaa2746801021c680357e6286d65724487556743c"}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8696ee5a9bf5cfc44492fe70d940916ffcfeb17ed6fa437455652b5d187e789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8696ee5a9bf5cfc44492fe70d940916ffcfeb17ed6fa437455652b5d187e789","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8696ee5a9bf5cfc44492fe70d940916ffcfeb17ed6fa437455652b5d187e789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8696ee5a9bf5cfc44492fe70d940916ffcfeb17ed6fa437455652b5d187e789"}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8696ee5a9bf5cfc44492fe70d940916ffcfeb17ed6fa437455652b5d187e789","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a123cf2a8231b5bef56054ddaa2746801021c680357e6286d65724487556743c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a123cf2a8231b5bef56054ddaa2746801021c680357e6286d65724487556743c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a123cf2a8231b5bef56054ddaa2746801021c680357e6286d65724487556743c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8696ee5a9bf5cfc44492fe70d940916ffcfeb17ed6fa437455652b5d187e789","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8696ee5a9bf5cfc44492fe70d940916ffcfeb17ed6fa437455652b5d187e789"}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a123cf2a8231b5bef56054ddaa2746801021c680357e6286d65724487556743c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8696ee5a9bf5cfc44492fe70d940916ffcfeb17ed6fa437455652b5d187e789","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8696ee5a9bf5cfc44492fe70d940916ffcfeb17ed6fa437455652b5d187e789"}
{"level":"info","ts":"2026-07-07T00:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a123cf2a8231b5bef56054ddaa2746801021c680357e6286d65724487556743c"}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8696ee5a9bf5cfc44492fe70d940916ffcfeb17ed6fa437455652b5d187e789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8696ee5a9bf5cfc44492fe70d940916ffcfeb17ed6fa437455652b5d187e789"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba"}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8696ee5a9bf5cfc44492fe70d940916ffcfeb17ed6fa437455652b5d187e789","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8696ee5a9bf5cfc44492fe70d940916ffcfeb17ed6fa437455652b5d187e789","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba"}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8696ee5a9bf5cfc44492fe70d940916ffcfeb17ed6fa437455652b5d187e789"}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba"}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326e447e9d6e624c1c7796b9bca7aff122027d4f0e48bb17a1f3b4e91301f9e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326e447e9d6e624c1c7796b9bca7aff122027d4f0e48bb17a1f3b4e91301f9e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba"}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326e447e9d6e624c1c7796b9bca7aff122027d4f0e48bb17a1f3b4e91301f9e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326e447e9d6e624c1c7796b9bca7aff122027d4f0e48bb17a1f3b4e91301f9e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326e447e9d6e624c1c7796b9bca7aff122027d4f0e48bb17a1f3b4e91301f9e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"326e447e9d6e624c1c7796b9bca7aff122027d4f0e48bb17a1f3b4e91301f9e4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"326e447e9d6e624c1c7796b9bca7aff122027d4f0e48bb17a1f3b4e91301f9e4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326e447e9d6e624c1c7796b9bca7aff122027d4f0e48bb17a1f3b4e91301f9e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326e447e9d6e624c1c7796b9bca7aff122027d4f0e48bb17a1f3b4e91301f9e4"}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326e447e9d6e624c1c7796b9bca7aff122027d4f0e48bb17a1f3b4e91301f9e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326e447e9d6e624c1c7796b9bca7aff122027d4f0e48bb17a1f3b4e91301f9e4"}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850ee6c209571f9094d697a2ad52117027bac85dcb857a97b40865cee170299b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850ee6c209571f9094d697a2ad52117027bac85dcb857a97b40865cee170299b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850ee6c209571f9094d697a2ad52117027bac85dcb857a97b40865cee170299b"}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850ee6c209571f9094d697a2ad52117027bac85dcb857a97b40865cee170299b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["850ee6c209571f9094d697a2ad52117027bac85dcb857a97b40865cee170299b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700"}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850ee6c209571f9094d697a2ad52117027bac85dcb857a97b40865cee170299b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326e447e9d6e624c1c7796b9bca7aff122027d4f0e48bb17a1f3b4e91301f9e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["326e447e9d6e624c1c7796b9bca7aff122027d4f0e48bb17a1f3b4e91301f9e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326e447e9d6e624c1c7796b9bca7aff122027d4f0e48bb17a1f3b4e91301f9e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850ee6c209571f9094d697a2ad52117027bac85dcb857a97b40865cee170299b"}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850ee6c209571f9094d697a2ad52117027bac85dcb857a97b40865cee170299b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326e447e9d6e624c1c7796b9bca7aff122027d4f0e48bb17a1f3b4e91301f9e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700"}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326e447e9d6e624c1c7796b9bca7aff122027d4f0e48bb17a1f3b4e91301f9e4"}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d09f43f51826024c02b0251680d70bbee902281ca4921630a1baf68e024f3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850ee6c209571f9094d697a2ad52117027bac85dcb857a97b40865cee170299b"}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d09f43f51826024c02b0251680d70bbee902281ca4921630a1baf68e024f3e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700"}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d09f43f51826024c02b0251680d70bbee902281ca4921630a1baf68e024f3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d09f43f51826024c02b0251680d70bbee902281ca4921630a1baf68e024f3e0"}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700"}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d09f43f51826024c02b0251680d70bbee902281ca4921630a1baf68e024f3e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d09f43f51826024c02b0251680d70bbee902281ca4921630a1baf68e024f3e0"}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d09f43f51826024c02b0251680d70bbee902281ca4921630a1baf68e024f3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d09f43f51826024c02b0251680d70bbee902281ca4921630a1baf68e024f3e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3213b14d75515a5cc18495142344245db438cf9e8900e300bd89ddf1392fd460"}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d09f43f51826024c02b0251680d70bbee902281ca4921630a1baf68e024f3e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3213b14d75515a5cc18495142344245db438cf9e8900e300bd89ddf1392fd460","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3213b14d75515a5cc18495142344245db438cf9e8900e300bd89ddf1392fd460"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700"}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3213b14d75515a5cc18495142344245db438cf9e8900e300bd89ddf1392fd460","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d09f43f51826024c02b0251680d70bbee902281ca4921630a1baf68e024f3e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3213b14d75515a5cc18495142344245db438cf9e8900e300bd89ddf1392fd460","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d09f43f51826024c02b0251680d70bbee902281ca4921630a1baf68e024f3e0"}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3213b14d75515a5cc18495142344245db438cf9e8900e300bd89ddf1392fd460"}
{"level":"info","ts":"2026-07-07T00:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"}
{"level":"info","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e6ade05-2039-464b-989e-2bcdd9a722df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51416","PortSpecifier":{"PortValue":51416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e6ade05-2039-464b-989e-2bcdd9a722df","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e6ade05-2039-464b-989e-2bcdd9a722df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51416","PortSpecifier":{"PortValue":51416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384215,"nanos":999277019},"http":{"id":"9e6ade05-2039-464b-989e-2bcdd9a722df","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e6ade05-2039-464b-989e-2bcdd9a722df","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e6ade05-2039-464b-989e-2bcdd9a722df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e6ade05-2039-464b-989e-2bcdd9a722df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e6ade05-2039-464b-989e-2bcdd9a722df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e6ade05-2039-464b-989e-2bcdd9a722df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e6ade05-2039-464b-989e-2bcdd9a722df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/auth-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e6ade05-2039-464b-989e-2bcdd9a722df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e6ade05-2039-464b-989e-2bcdd9a722df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e6ade05-2039-464b-989e-2bcdd9a722df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e6ade05-2039-464b-989e-2bcdd9a722df","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e6ade05-2039-464b-989e-2bcdd9a722df","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"781dc13c-1693-4d70-a429-ebea1f0050e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60198","PortSpecifier":{"PortValue":60198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"781dc13c-1693-4d70-a429-ebea1f0050e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"781dc13c-1693-4d70-a429-ebea1f0050e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60198","PortSpecifier":{"PortValue":60198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384216,"nanos":57004674},"http":{"id":"781dc13c-1693-4d70-a429-ebea1f0050e7","method":"POST","headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"781dc13c-1693-4d70-a429-ebea1f0050e7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"781dc13c-1693-4d70-a429-ebea1f0050e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"781dc13c-1693-4d70-a429-ebea1f0050e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"781dc13c-1693-4d70-a429-ebea1f0050e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"781dc13c-1693-4d70-a429-ebea1f0050e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"781dc13c-1693-4d70-a429-ebea1f0050e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e3cf5/auth-test-model-4e3cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"781dc13c-1693-4d70-a429-ebea1f0050e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"781dc13c-1693-4d70-a429-ebea1f0050e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"781dc13c-1693-4d70-a429-ebea1f0050e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"781dc13c-1693-4d70-a429-ebea1f0050e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"781dc13c-1693-4d70-a429-ebea1f0050e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b588d11d-ad23-4848-9c30-460c26871f14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51420","PortSpecifier":{"PortValue":51420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b588d11d-ad23-4848-9c30-460c26871f14","method":"GET","path":"/maas-api/v1/api-keys/024c72d3-4437-4e4e-95d1-bfe40527856f","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b588d11d-ad23-4848-9c30-460c26871f14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51420","PortSpecifier":{"PortValue":51420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384216,"nanos":132007674},"http":{"id":"b588d11d-ad23-4848-9c30-460c26871f14","method":"GET","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/024c72d3-4437-4e4e-95d1-bfe40527856f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b588d11d-ad23-4848-9c30-460c26871f14","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b588d11d-ad23-4848-9c30-460c26871f14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b588d11d-ad23-4848-9c30-460c26871f14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/024c72d3-4437-4e4e-95d1-bfe40527856f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b588d11d-ad23-4848-9c30-460c26871f14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b588d11d-ad23-4848-9c30-460c26871f14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b588d11d-ad23-4848-9c30-460c26871f14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/auth-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b588d11d-ad23-4848-9c30-460c26871f14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b588d11d-ad23-4848-9c30-460c26871f14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b588d11d-ad23-4848-9c30-460c26871f14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b588d11d-ad23-4848-9c30-460c26871f14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b588d11d-ad23-4848-9c30-460c26871f14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94819e0b-87cb-44d3-a17d-a3df8b4e9059","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60200","PortSpecifier":{"PortValue":60200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94819e0b-87cb-44d3-a17d-a3df8b4e9059","method":"GET","path":"/maas-api/v1/api-keys/3bc7863d-e1cb-4a4f-a20f-ea7e8555ce1a","host":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94819e0b-87cb-44d3-a17d-a3df8b4e9059","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60200","PortSpecifier":{"PortValue":60200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384216,"nanos":164708132},"http":{"id":"94819e0b-87cb-44d3-a17d-a3df8b4e9059","method":"GET","headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3bc7863d-e1cb-4a4f-a20f-ea7e8555ce1a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94819e0b-87cb-44d3-a17d-a3df8b4e9059","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94819e0b-87cb-44d3-a17d-a3df8b4e9059","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94819e0b-87cb-44d3-a17d-a3df8b4e9059","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3bc7863d-e1cb-4a4f-a20f-ea7e8555ce1a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94819e0b-87cb-44d3-a17d-a3df8b4e9059","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94819e0b-87cb-44d3-a17d-a3df8b4e9059","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94819e0b-87cb-44d3-a17d-a3df8b4e9059","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e3cf5/auth-test-model-4e3cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94819e0b-87cb-44d3-a17d-a3df8b4e9059","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94819e0b-87cb-44d3-a17d-a3df8b4e9059","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94819e0b-87cb-44d3-a17d-a3df8b4e9059","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94819e0b-87cb-44d3-a17d-a3df8b4e9059","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94819e0b-87cb-44d3-a17d-a3df8b4e9059","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5646faf-98e1-4aaf-8651-f4a93de5a691","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37454","PortSpecifier":{"PortValue":37454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5646faf-98e1-4aaf-8651-f4a93de5a691","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5646faf-98e1-4aaf-8651-f4a93de5a691","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37454","PortSpecifier":{"PortValue":37454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384231,"nanos":82662630},"http":{"id":"d5646faf-98e1-4aaf-8651-f4a93de5a691","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5646faf-98e1-4aaf-8651-f4a93de5a691","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5646faf-98e1-4aaf-8651-f4a93de5a691","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5646faf-98e1-4aaf-8651-f4a93de5a691","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5646faf-98e1-4aaf-8651-f4a93de5a691","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5646faf-98e1-4aaf-8651-f4a93de5a691","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5646faf-98e1-4aaf-8651-f4a93de5a691","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/auth-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5646faf-98e1-4aaf-8651-f4a93de5a691","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5646faf-98e1-4aaf-8651-f4a93de5a691","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5646faf-98e1-4aaf-8651-f4a93de5a691","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5646faf-98e1-4aaf-8651-f4a93de5a691","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5646faf-98e1-4aaf-8651-f4a93de5a691","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f343204e-7f48-4b32-9b8b-6c6add0f76b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50090","PortSpecifier":{"PortValue":50090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f343204e-7f48-4b32-9b8b-6c6add0f76b4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f343204e-7f48-4b32-9b8b-6c6add0f76b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50090","PortSpecifier":{"PortValue":50090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384231,"nanos":125482947},"http":{"id":"f343204e-7f48-4b32-9b8b-6c6add0f76b4","method":"POST","headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f343204e-7f48-4b32-9b8b-6c6add0f76b4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f343204e-7f48-4b32-9b8b-6c6add0f76b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f343204e-7f48-4b32-9b8b-6c6add0f76b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f343204e-7f48-4b32-9b8b-6c6add0f76b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f343204e-7f48-4b32-9b8b-6c6add0f76b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f343204e-7f48-4b32-9b8b-6c6add0f76b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e3cf5/auth-test-model-4e3cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f343204e-7f48-4b32-9b8b-6c6add0f76b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f343204e-7f48-4b32-9b8b-6c6add0f76b4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f343204e-7f48-4b32-9b8b-6c6add0f76b4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f343204e-7f48-4b32-9b8b-6c6add0f76b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f343204e-7f48-4b32-9b8b-6c6add0f76b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b24b128-8d13-4992-a6de-6ca6bdf9a443","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37456","PortSpecifier":{"PortValue":37456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b24b128-8d13-4992-a6de-6ca6bdf9a443","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b24b128-8d13-4992-a6de-6ca6bdf9a443","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37456","PortSpecifier":{"PortValue":37456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384231,"nanos":162007537},"http":{"id":"3b24b128-8d13-4992-a6de-6ca6bdf9a443","method":"GET","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b24b128-8d13-4992-a6de-6ca6bdf9a443","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nnosnsAxCPt8r43M_bkU6TmZwe0t6HZdNHOpJlQNAazAv1MCDIiPP1GNQ8ws"}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b24b128-8d13-4992-a6de-6ca6bdf9a443","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nnosnsAxCPt8r43M_bkU6TmZwe0t6HZdNHOpJlQNAazAv1MCDIiPP1GNQ8ws\"}"}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b24b128-8d13-4992-a6de-6ca6bdf9a443","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"de9768fe-0a3b-4b40-b18c-df2eff98a63f","keyName":"e2e-auth-iso-a-a5ac2c","subscription":"e2e-auth-iso-fb6077","tenant":"e2e-shared-a-8714ac","userId":"de9768fe-0a3b-4b40-b18c-df2eff98a63f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b24b128-8d13-4992-a6de-6ca6bdf9a443","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b24b128-8d13-4992-a6de-6ca6bdf9a443","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b24b128-8d13-4992-a6de-6ca6bdf9a443","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b24b128-8d13-4992-a6de-6ca6bdf9a443","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/auth-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b24b128-8d13-4992-a6de-6ca6bdf9a443","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b24b128-8d13-4992-a6de-6ca6bdf9a443","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b24b128-8d13-4992-a6de-6ca6bdf9a443","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b24b128-8d13-4992-a6de-6ca6bdf9a443","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-fb6077"}
{"level":"info","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b24b128-8d13-4992-a6de-6ca6bdf9a443","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b24b128-8d13-4992-a6de-6ca6bdf9a443","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f94d048e-962f-4b1b-bc58-160c8c63ba97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48742","PortSpecifier":{"PortValue":48742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f94d048e-962f-4b1b-bc58-160c8c63ba97","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f94d048e-962f-4b1b-bc58-160c8c63ba97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48742","PortSpecifier":{"PortValue":48742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384246,"nanos":91632945},"http":{"id":"f94d048e-962f-4b1b-bc58-160c8c63ba97","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f94d048e-962f-4b1b-bc58-160c8c63ba97","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f94d048e-962f-4b1b-bc58-160c8c63ba97","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f94d048e-962f-4b1b-bc58-160c8c63ba97","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f94d048e-962f-4b1b-bc58-160c8c63ba97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f94d048e-962f-4b1b-bc58-160c8c63ba97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f94d048e-962f-4b1b-bc58-160c8c63ba97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/auth-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f94d048e-962f-4b1b-bc58-160c8c63ba97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f94d048e-962f-4b1b-bc58-160c8c63ba97","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f94d048e-962f-4b1b-bc58-160c8c63ba97","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f94d048e-962f-4b1b-bc58-160c8c63ba97","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f94d048e-962f-4b1b-bc58-160c8c63ba97","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"709684cf-d74b-4523-afe5-cc5e1b5c657f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50620","PortSpecifier":{"PortValue":50620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"709684cf-d74b-4523-afe5-cc5e1b5c657f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"709684cf-d74b-4523-afe5-cc5e1b5c657f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50620","PortSpecifier":{"PortValue":50620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384246,"nanos":129540363},"http":{"id":"709684cf-d74b-4523-afe5-cc5e1b5c657f","method":"POST","headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"709684cf-d74b-4523-afe5-cc5e1b5c657f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"709684cf-d74b-4523-afe5-cc5e1b5c657f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"709684cf-d74b-4523-afe5-cc5e1b5c657f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"709684cf-d74b-4523-afe5-cc5e1b5c657f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"709684cf-d74b-4523-afe5-cc5e1b5c657f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"709684cf-d74b-4523-afe5-cc5e1b5c657f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e3cf5/auth-test-model-4e3cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"709684cf-d74b-4523-afe5-cc5e1b5c657f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"709684cf-d74b-4523-afe5-cc5e1b5c657f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"709684cf-d74b-4523-afe5-cc5e1b5c657f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"709684cf-d74b-4523-afe5-cc5e1b5c657f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"709684cf-d74b-4523-afe5-cc5e1b5c657f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c78ba33-c758-4578-8613-98f824d8ed89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50632","PortSpecifier":{"PortValue":50632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c78ba33-c758-4578-8613-98f824d8ed89","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c78ba33-c758-4578-8613-98f824d8ed89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50632","PortSpecifier":{"PortValue":50632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384246,"nanos":170740270},"http":{"id":"2c78ba33-c758-4578-8613-98f824d8ed89","method":"GET","headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c78ba33-c758-4578-8613-98f824d8ed89","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CrDyckOPTc1M6yg7_lREZEYtDevnX6zMceZsxZDYCWSYnfOD1IM0zFtJZNrA"}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2c78ba33-c758-4578-8613-98f824d8ed89","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4e3cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CrDyckOPTc1M6yg7_lREZEYtDevnX6zMceZsxZDYCWSYnfOD1IM0zFtJZNrA\"}"}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2c78ba33-c758-4578-8613-98f824d8ed89","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4e3cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c78ba33-c758-4578-8613-98f824d8ed89","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c78ba33-c758-4578-8613-98f824d8ed89","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"2c78ba33-c758-4578-8613-98f824d8ed89","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c78ba33-c758-4578-8613-98f824d8ed89","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T00:30:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c78ba33-c758-4578-8613-98f824d8ed89","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d2168e2-1760-4010-b520-0f1f33231c2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56940","PortSpecifier":{"PortValue":56940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d2168e2-1760-4010-b520-0f1f33231c2c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d2168e2-1760-4010-b520-0f1f33231c2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56940","PortSpecifier":{"PortValue":56940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384268,"nanos":384009467},"http":{"id":"6d2168e2-1760-4010-b520-0f1f33231c2c","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d2168e2-1760-4010-b520-0f1f33231c2c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d2168e2-1760-4010-b520-0f1f33231c2c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d2168e2-1760-4010-b520-0f1f33231c2c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d2168e2-1760-4010-b520-0f1f33231c2c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d2168e2-1760-4010-b520-0f1f33231c2c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d2168e2-1760-4010-b520-0f1f33231c2c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/auth-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d2168e2-1760-4010-b520-0f1f33231c2c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d2168e2-1760-4010-b520-0f1f33231c2c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d2168e2-1760-4010-b520-0f1f33231c2c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d2168e2-1760-4010-b520-0f1f33231c2c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d2168e2-1760-4010-b520-0f1f33231c2c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b802258e-7143-4e09-a596-9b56ea36c100","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46710","PortSpecifier":{"PortValue":46710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b802258e-7143-4e09-a596-9b56ea36c100","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b802258e-7143-4e09-a596-9b56ea36c100","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46710","PortSpecifier":{"PortValue":46710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384268,"nanos":421196804},"http":{"id":"b802258e-7143-4e09-a596-9b56ea36c100","method":"POST","headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b802258e-7143-4e09-a596-9b56ea36c100","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b802258e-7143-4e09-a596-9b56ea36c100","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b802258e-7143-4e09-a596-9b56ea36c100","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b802258e-7143-4e09-a596-9b56ea36c100","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b802258e-7143-4e09-a596-9b56ea36c100","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b802258e-7143-4e09-a596-9b56ea36c100","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e3cf5/auth-test-model-4e3cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b802258e-7143-4e09-a596-9b56ea36c100","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b802258e-7143-4e09-a596-9b56ea36c100","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b802258e-7143-4e09-a596-9b56ea36c100","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b802258e-7143-4e09-a596-9b56ea36c100","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b802258e-7143-4e09-a596-9b56ea36c100","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b805f9fd-3105-4aba-a239-e3adc08fa1c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56948","PortSpecifier":{"PortValue":56948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b805f9fd-3105-4aba-a239-e3adc08fa1c6","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b805f9fd-3105-4aba-a239-e3adc08fa1c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56948","PortSpecifier":{"PortValue":56948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384268,"nanos":460615086},"http":{"id":"b805f9fd-3105-4aba-a239-e3adc08fa1c6","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b805f9fd-3105-4aba-a239-e3adc08fa1c6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b805f9fd-3105-4aba-a239-e3adc08fa1c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b805f9fd-3105-4aba-a239-e3adc08fa1c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b805f9fd-3105-4aba-a239-e3adc08fa1c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b805f9fd-3105-4aba-a239-e3adc08fa1c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b805f9fd-3105-4aba-a239-e3adc08fa1c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/auth-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b805f9fd-3105-4aba-a239-e3adc08fa1c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b805f9fd-3105-4aba-a239-e3adc08fa1c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b805f9fd-3105-4aba-a239-e3adc08fa1c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b805f9fd-3105-4aba-a239-e3adc08fa1c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b805f9fd-3105-4aba-a239-e3adc08fa1c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"003e865b-1ebf-43c8-aa3b-e82cc378bfe6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46712","PortSpecifier":{"PortValue":46712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"003e865b-1ebf-43c8-aa3b-e82cc378bfe6","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"003e865b-1ebf-43c8-aa3b-e82cc378bfe6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46712","PortSpecifier":{"PortValue":46712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384268,"nanos":495020753},"http":{"id":"003e865b-1ebf-43c8-aa3b-e82cc378bfe6","method":"POST","headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"003e865b-1ebf-43c8-aa3b-e82cc378bfe6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"003e865b-1ebf-43c8-aa3b-e82cc378bfe6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"003e865b-1ebf-43c8-aa3b-e82cc378bfe6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"003e865b-1ebf-43c8-aa3b-e82cc378bfe6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"003e865b-1ebf-43c8-aa3b-e82cc378bfe6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"003e865b-1ebf-43c8-aa3b-e82cc378bfe6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e3cf5/auth-test-model-4e3cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"003e865b-1ebf-43c8-aa3b-e82cc378bfe6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"003e865b-1ebf-43c8-aa3b-e82cc378bfe6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"003e865b-1ebf-43c8-aa3b-e82cc378bfe6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"003e865b-1ebf-43c8-aa3b-e82cc378bfe6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"003e865b-1ebf-43c8-aa3b-e82cc378bfe6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f9b61ff-0dbf-4897-8528-0ec9def23534","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39380","PortSpecifier":{"PortValue":39380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f9b61ff-0dbf-4897-8528-0ec9def23534","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f9b61ff-0dbf-4897-8528-0ec9def23534","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39380","PortSpecifier":{"PortValue":39380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384290,"nanos":685921806},"http":{"id":"3f9b61ff-0dbf-4897-8528-0ec9def23534","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f9b61ff-0dbf-4897-8528-0ec9def23534","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f9b61ff-0dbf-4897-8528-0ec9def23534","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f9b61ff-0dbf-4897-8528-0ec9def23534","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f9b61ff-0dbf-4897-8528-0ec9def23534","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f9b61ff-0dbf-4897-8528-0ec9def23534","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f9b61ff-0dbf-4897-8528-0ec9def23534","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/auth-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f9b61ff-0dbf-4897-8528-0ec9def23534","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f9b61ff-0dbf-4897-8528-0ec9def23534","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f9b61ff-0dbf-4897-8528-0ec9def23534","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f9b61ff-0dbf-4897-8528-0ec9def23534","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f9b61ff-0dbf-4897-8528-0ec9def23534","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73f23adc-c05a-4769-8468-c9c445fac44e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42142","PortSpecifier":{"PortValue":42142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73f23adc-c05a-4769-8468-c9c445fac44e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73f23adc-c05a-4769-8468-c9c445fac44e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42142","PortSpecifier":{"PortValue":42142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384290,"nanos":724260295},"http":{"id":"73f23adc-c05a-4769-8468-c9c445fac44e","method":"POST","headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"73f23adc-c05a-4769-8468-c9c445fac44e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73f23adc-c05a-4769-8468-c9c445fac44e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73f23adc-c05a-4769-8468-c9c445fac44e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73f23adc-c05a-4769-8468-c9c445fac44e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73f23adc-c05a-4769-8468-c9c445fac44e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73f23adc-c05a-4769-8468-c9c445fac44e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e3cf5/auth-test-model-4e3cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73f23adc-c05a-4769-8468-c9c445fac44e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73f23adc-c05a-4769-8468-c9c445fac44e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73f23adc-c05a-4769-8468-c9c445fac44e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73f23adc-c05a-4769-8468-c9c445fac44e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73f23adc-c05a-4769-8468-c9c445fac44e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a16d09b6-1fb8-463e-ba04-2b181d79aa0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42146","PortSpecifier":{"PortValue":42146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a16d09b6-1fb8-463e-ba04-2b181d79aa0c","method":"GET","path":"/maas-api/v1/api-keys/c4cb28cf-1f38-4740-bcab-d3ff649eb729","host":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a16d09b6-1fb8-463e-ba04-2b181d79aa0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42146","PortSpecifier":{"PortValue":42146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384290,"nanos":766431870},"http":{"id":"a16d09b6-1fb8-463e-ba04-2b181d79aa0c","method":"GET","headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c4cb28cf-1f38-4740-bcab-d3ff649eb729",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a16d09b6-1fb8-463e-ba04-2b181d79aa0c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a16d09b6-1fb8-463e-ba04-2b181d79aa0c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a16d09b6-1fb8-463e-ba04-2b181d79aa0c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c4cb28cf-1f38-4740-bcab-d3ff649eb729",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a16d09b6-1fb8-463e-ba04-2b181d79aa0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a16d09b6-1fb8-463e-ba04-2b181d79aa0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a16d09b6-1fb8-463e-ba04-2b181d79aa0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e3cf5/auth-test-model-4e3cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a16d09b6-1fb8-463e-ba04-2b181d79aa0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a16d09b6-1fb8-463e-ba04-2b181d79aa0c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a16d09b6-1fb8-463e-ba04-2b181d79aa0c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a16d09b6-1fb8-463e-ba04-2b181d79aa0c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a16d09b6-1fb8-463e-ba04-2b181d79aa0c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7fd0dd7-14b5-467d-9a7b-96da0a766eb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39388","PortSpecifier":{"PortValue":39388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7fd0dd7-14b5-467d-9a7b-96da0a766eb4","method":"GET","path":"/maas-api/v1/api-keys/c4cb28cf-1f38-4740-bcab-d3ff649eb729","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7fd0dd7-14b5-467d-9a7b-96da0a766eb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39388","PortSpecifier":{"PortValue":39388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384290,"nanos":801390394},"http":{"id":"d7fd0dd7-14b5-467d-9a7b-96da0a766eb4","method":"GET","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c4cb28cf-1f38-4740-bcab-d3ff649eb729",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d7fd0dd7-14b5-467d-9a7b-96da0a766eb4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7fd0dd7-14b5-467d-9a7b-96da0a766eb4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7fd0dd7-14b5-467d-9a7b-96da0a766eb4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c4cb28cf-1f38-4740-bcab-d3ff649eb729",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7fd0dd7-14b5-467d-9a7b-96da0a766eb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7fd0dd7-14b5-467d-9a7b-96da0a766eb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7fd0dd7-14b5-467d-9a7b-96da0a766eb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/auth-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d7fd0dd7-14b5-467d-9a7b-96da0a766eb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7fd0dd7-14b5-467d-9a7b-96da0a766eb4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7fd0dd7-14b5-467d-9a7b-96da0a766eb4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7fd0dd7-14b5-467d-9a7b-96da0a766eb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7fd0dd7-14b5-467d-9a7b-96da0a766eb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a64d9f06-4045-42d9-b82e-b7eb42cd4504","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43224","PortSpecifier":{"PortValue":43224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a64d9f06-4045-42d9-b82e-b7eb42cd4504","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a64d9f06-4045-42d9-b82e-b7eb42cd4504","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43224","PortSpecifier":{"PortValue":43224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384307,"nanos":921901204},"http":{"id":"a64d9f06-4045-42d9-b82e-b7eb42cd4504","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a64d9f06-4045-42d9-b82e-b7eb42cd4504","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a64d9f06-4045-42d9-b82e-b7eb42cd4504","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a64d9f06-4045-42d9-b82e-b7eb42cd4504","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a64d9f06-4045-42d9-b82e-b7eb42cd4504","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a64d9f06-4045-42d9-b82e-b7eb42cd4504","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a64d9f06-4045-42d9-b82e-b7eb42cd4504","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/auth-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a64d9f06-4045-42d9-b82e-b7eb42cd4504","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a64d9f06-4045-42d9-b82e-b7eb42cd4504","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a64d9f06-4045-42d9-b82e-b7eb42cd4504","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a64d9f06-4045-42d9-b82e-b7eb42cd4504","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a64d9f06-4045-42d9-b82e-b7eb42cd4504","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c96187fe-f2c1-46a6-8c46-cfad98ef02ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41348","PortSpecifier":{"PortValue":41348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c96187fe-f2c1-46a6-8c46-cfad98ef02ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c96187fe-f2c1-46a6-8c46-cfad98ef02ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41348","PortSpecifier":{"PortValue":41348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384307,"nanos":957924605},"http":{"id":"c96187fe-f2c1-46a6-8c46-cfad98ef02ab","method":"POST","headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c96187fe-f2c1-46a6-8c46-cfad98ef02ab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c96187fe-f2c1-46a6-8c46-cfad98ef02ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c96187fe-f2c1-46a6-8c46-cfad98ef02ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c96187fe-f2c1-46a6-8c46-cfad98ef02ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c96187fe-f2c1-46a6-8c46-cfad98ef02ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c96187fe-f2c1-46a6-8c46-cfad98ef02ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e3cf5/auth-test-model-4e3cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c96187fe-f2c1-46a6-8c46-cfad98ef02ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c96187fe-f2c1-46a6-8c46-cfad98ef02ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c96187fe-f2c1-46a6-8c46-cfad98ef02ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c96187fe-f2c1-46a6-8c46-cfad98ef02ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c96187fe-f2c1-46a6-8c46-cfad98ef02ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c79b9d0a-c5b2-4d06-93cc-d94bcad4524a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43236","PortSpecifier":{"PortValue":43236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c79b9d0a-c5b2-4d06-93cc-d94bcad4524a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c79b9d0a-c5b2-4d06-93cc-d94bcad4524a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43236","PortSpecifier":{"PortValue":43236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384307,"nanos":997795874},"http":{"id":"c79b9d0a-c5b2-4d06-93cc-d94bcad4524a","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c79b9d0a-c5b2-4d06-93cc-d94bcad4524a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tNi9fi4lkecMmqDT_FHD856VYpRxnAgBhyGBDakefPGj3KmDqLSGWxHnM6Gi"}
{"level":"debug","ts":"2026-07-07T00:31:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c79b9d0a-c5b2-4d06-93cc-d94bcad4524a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tNi9fi4lkecMmqDT_FHD856VYpRxnAgBhyGBDakefPGj3KmDqLSGWxHnM6Gi\"}"}
{"level":"debug","ts":"2026-07-07T00:31:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c79b9d0a-c5b2-4d06-93cc-d94bcad4524a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3f400a7b-4345-421c-85fa-9dfa5975509c","keyName":"e2e-auth-iso-a-6b33d0","subscription":"e2e-auth-iso-309c03","tenant":"e2e-shared-a-8714ac","userId":"3f400a7b-4345-421c-85fa-9dfa5975509c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:31:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c79b9d0a-c5b2-4d06-93cc-d94bcad4524a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c79b9d0a-c5b2-4d06-93cc-d94bcad4524a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c79b9d0a-c5b2-4d06-93cc-d94bcad4524a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c79b9d0a-c5b2-4d06-93cc-d94bcad4524a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/auth-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c79b9d0a-c5b2-4d06-93cc-d94bcad4524a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:31:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c79b9d0a-c5b2-4d06-93cc-d94bcad4524a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-309c03"}
{"level":"debug","ts":"2026-07-07T00:31:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c79b9d0a-c5b2-4d06-93cc-d94bcad4524a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:31:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c79b9d0a-c5b2-4d06-93cc-d94bcad4524a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T00:31:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c79b9d0a-c5b2-4d06-93cc-d94bcad4524a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:31:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c79b9d0a-c5b2-4d06-93cc-d94bcad4524a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68dc5c068c806e311b26ffe01728ca6a0b87689d7484023df802476b27f4effb"}
{"level":"info","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bad3376150a51c0607a3c088d3482da2e0aab9ccfb546bb54c32fe405ebfd2ad"}
{"level":"info","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7695134f0c96bcd7d155de46528fe6447254ece727a178e8cff39052bc56e284"}
{"level":"info","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f36f70eab74c1146080b8bd884a3dcb5ffa50f9fa78e51ff333398502162e80a"}
{"level":"info","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2dde3ca2f06f76848ccabab93fc2aebf0ac561f738d5e4915006b2ad0271276"}
{"level":"info","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d506802806dd351edf20a890eef5e387a883f2c72f13eb382eb754c50945ee2b"}
{"level":"info","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dc34837c69e836013d060477b131d512d6ad9c215f6ce5213d0dac91afe7ddf"}
{"level":"info","ts":"2026-07-07T00:31:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/008307a7116b42f8a40dee43db39268e6e20cb90f1130a91601ae691b60c0e8c"}
{"level":"info","ts":"2026-07-07T00:32:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0e095430da7600e95d806e7b7615378def60210490a8086630f56e1a32c2700"}
{"level":"info","ts":"2026-07-07T00:32:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d09f43f51826024c02b0251680d70bbee902281ca4921630a1baf68e024f3e0"}
{"level":"info","ts":"2026-07-07T00:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8696ee5a9bf5cfc44492fe70d940916ffcfeb17ed6fa437455652b5d187e789"}
{"level":"info","ts":"2026-07-07T00:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/850ee6c209571f9094d697a2ad52117027bac85dcb857a97b40865cee170299b"}
{"level":"info","ts":"2026-07-07T00:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1db3ac6199b08194bc2e08d0ba40433e97a4c66339d155e2706cb09a65c3b682"}
{"level":"info","ts":"2026-07-07T00:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3213b14d75515a5cc18495142344245db438cf9e8900e300bd89ddf1392fd460"}
{"level":"info","ts":"2026-07-07T00:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a123cf2a8231b5bef56054ddaa2746801021c680357e6286d65724487556743c"}
{"level":"info","ts":"2026-07-07T00:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/326e447e9d6e624c1c7796b9bca7aff122027d4f0e48bb17a1f3b4e91301f9e4"}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e"}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e"}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e"}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c51be7e09b61bbac5f8e2545407e46b5748c41381d4c26643c8d3579806c33fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c51be7e09b61bbac5f8e2545407e46b5748c41381d4c26643c8d3579806c33fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c51be7e09b61bbac5f8e2545407e46b5748c41381d4c26643c8d3579806c33fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c51be7e09b61bbac5f8e2545407e46b5748c41381d4c26643c8d3579806c33fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c51be7e09b61bbac5f8e2545407e46b5748c41381d4c26643c8d3579806c33fe"}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c51be7e09b61bbac5f8e2545407e46b5748c41381d4c26643c8d3579806c33fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c51be7e09b61bbac5f8e2545407e46b5748c41381d4c26643c8d3579806c33fe"}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c51be7e09b61bbac5f8e2545407e46b5748c41381d4c26643c8d3579806c33fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c51be7e09b61bbac5f8e2545407e46b5748c41381d4c26643c8d3579806c33fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c51be7e09b61bbac5f8e2545407e46b5748c41381d4c26643c8d3579806c33fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c51be7e09b61bbac5f8e2545407e46b5748c41381d4c26643c8d3579806c33fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c51be7e09b61bbac5f8e2545407e46b5748c41381d4c26643c8d3579806c33fe"}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2"}
{"level":"error","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2"}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec"}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec"}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec"}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2"}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec"}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0"}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec"}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0"}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec"}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0"}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec"}
{"level":"error","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0"}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e0a3a4d0f4f4f9d1f4c77c9d47f91451a44c90b1e0cd28c03121c320c3534d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0"}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e0a3a4d0f4f4f9d1f4c77c9d47f91451a44c90b1e0cd28c03121c320c3534d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e0a3a4d0f4f4f9d1f4c77c9d47f91451a44c90b1e0cd28c03121c320c3534d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e0a3a4d0f4f4f9d1f4c77c9d47f91451a44c90b1e0cd28c03121c320c3534d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e0a3a4d0f4f4f9d1f4c77c9d47f91451a44c90b1e0cd28c03121c320c3534d8"}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e0a3a4d0f4f4f9d1f4c77c9d47f91451a44c90b1e0cd28c03121c320c3534d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e0a3a4d0f4f4f9d1f4c77c9d47f91451a44c90b1e0cd28c03121c320c3534d8"}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e0a3a4d0f4f4f9d1f4c77c9d47f91451a44c90b1e0cd28c03121c320c3534d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e0a3a4d0f4f4f9d1f4c77c9d47f91451a44c90b1e0cd28c03121c320c3534d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e0a3a4d0f4f4f9d1f4c77c9d47f91451a44c90b1e0cd28c03121c320c3534d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e0a3a4d0f4f4f9d1f4c77c9d47f91451a44c90b1e0cd28c03121c320c3534d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0"}
{"level":"info","ts":"2026-07-07T00:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e0a3a4d0f4f4f9d1f4c77c9d47f91451a44c90b1e0cd28c03121c320c3534d8"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500"}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9"}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500"}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9"}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b"}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b"}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b"}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b"}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b"}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c"}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c"}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ee930efe222c88a632446c7b002255a8adddba343e1f70b2f1067c13e56d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ee930efe222c88a632446c7b002255a8adddba343e1f70b2f1067c13e56d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ee930efe222c88a632446c7b002255a8adddba343e1f70b2f1067c13e56d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ee930efe222c88a632446c7b002255a8adddba343e1f70b2f1067c13e56d90"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ee930efe222c88a632446c7b002255a8adddba343e1f70b2f1067c13e56d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ee930efe222c88a632446c7b002255a8adddba343e1f70b2f1067c13e56d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1ee930efe222c88a632446c7b002255a8adddba343e1f70b2f1067c13e56d90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ee930efe222c88a632446c7b002255a8adddba343e1f70b2f1067c13e56d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ee930efe222c88a632446c7b002255a8adddba343e1f70b2f1067c13e56d90"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ee930efe222c88a632446c7b002255a8adddba343e1f70b2f1067c13e56d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ee930efe222c88a632446c7b002255a8adddba343e1f70b2f1067c13e56d90"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"}
{"level":"error","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a"}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90"}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90"}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e"}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e"}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e"}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e"}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e"}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c"}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c"}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c"}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90"}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90"}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ee930efe222c88a632446c7b002255a8adddba343e1f70b2f1067c13e56d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e0a3a4d0f4f4f9d1f4c77c9d47f91451a44c90b1e0cd28c03121c320c3534d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ee930efe222c88a632446c7b002255a8adddba343e1f70b2f1067c13e56d90"}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e0a3a4d0f4f4f9d1f4c77c9d47f91451a44c90b1e0cd28c03121c320c3534d8"}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba"}
{"level":"info","ts":"2026-07-07T00:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500"}
{"level":"debug","ts":"2026-07-07T00:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c"}
{"level":"debug","ts":"2026-07-07T00:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec"}
{"level":"debug","ts":"2026-07-07T00:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2"}
{"level":"info","ts":"2026-07-07T00:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0"}
{"level":"debug","ts":"2026-07-07T00:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c51be7e09b61bbac5f8e2545407e46b5748c41381d4c26643c8d3579806c33fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a"}
{"level":"debug","ts":"2026-07-07T00:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c51be7e09b61bbac5f8e2545407e46b5748c41381d4c26643c8d3579806c33fe"}
{"level":"debug","ts":"2026-07-07T00:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b"}
{"level":"info","ts":"2026-07-07T00:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9"}
{"level":"info","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a33d0b7-4ad7-43d8-8c29-5563d03d64d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33028","PortSpecifier":{"PortValue":33028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a33d0b7-4ad7-43d8-8c29-5563d03d64d7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a33d0b7-4ad7-43d8-8c29-5563d03d64d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33028","PortSpecifier":{"PortValue":33028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384380,"nanos":834893000},"http":{"id":"6a33d0b7-4ad7-43d8-8c29-5563d03d64d7","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6a33d0b7-4ad7-43d8-8c29-5563d03d64d7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a33d0b7-4ad7-43d8-8c29-5563d03d64d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a33d0b7-4ad7-43d8-8c29-5563d03d64d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a33d0b7-4ad7-43d8-8c29-5563d03d64d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a33d0b7-4ad7-43d8-8c29-5563d03d64d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a33d0b7-4ad7-43d8-8c29-5563d03d64d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/sub-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a33d0b7-4ad7-43d8-8c29-5563d03d64d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a33d0b7-4ad7-43d8-8c29-5563d03d64d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a33d0b7-4ad7-43d8-8c29-5563d03d64d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a33d0b7-4ad7-43d8-8c29-5563d03d64d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a33d0b7-4ad7-43d8-8c29-5563d03d64d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c51dc4f-381f-4865-a358-b3c034da417d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46530","PortSpecifier":{"PortValue":46530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c51dc4f-381f-4865-a358-b3c034da417d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c51dc4f-381f-4865-a358-b3c034da417d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46530","PortSpecifier":{"PortValue":46530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384380,"nanos":875130896},"http":{"id":"8c51dc4f-381f-4865-a358-b3c034da417d","method":"POST","headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8c51dc4f-381f-4865-a358-b3c034da417d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c51dc4f-381f-4865-a358-b3c034da417d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c51dc4f-381f-4865-a358-b3c034da417d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c51dc4f-381f-4865-a358-b3c034da417d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c51dc4f-381f-4865-a358-b3c034da417d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c51dc4f-381f-4865-a358-b3c034da417d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e3cf5/sub-test-model-4e3cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c51dc4f-381f-4865-a358-b3c034da417d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c51dc4f-381f-4865-a358-b3c034da417d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c51dc4f-381f-4865-a358-b3c034da417d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c51dc4f-381f-4865-a358-b3c034da417d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c51dc4f-381f-4865-a358-b3c034da417d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca41358a-9fd9-49d8-9d4b-3b4cd4c101aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33034","PortSpecifier":{"PortValue":33034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca41358a-9fd9-49d8-9d4b-3b4cd4c101aa","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca41358a-9fd9-49d8-9d4b-3b4cd4c101aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33034","PortSpecifier":{"PortValue":33034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384380,"nanos":917921765},"http":{"id":"ca41358a-9fd9-49d8-9d4b-3b4cd4c101aa","method":"GET","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca41358a-9fd9-49d8-9d4b-3b4cd4c101aa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QQezpe6axH7WwLVE_mtA5WfRsQuqLfp67OSufZRsPaET2DrzEdFKNrBoHI8a"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca41358a-9fd9-49d8-9d4b-3b4cd4c101aa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QQezpe6axH7WwLVE_mtA5WfRsQuqLfp67OSufZRsPaET2DrzEdFKNrBoHI8a\"}"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca41358a-9fd9-49d8-9d4b-3b4cd4c101aa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"101cb69c-b792-4d8d-ba22-4ef617270f72","keyName":"e2e-sub-iso-efb88c","subscription":"e2e-a-only-479f6e","tenant":"e2e-shared-a-8714ac","userId":"101cb69c-b792-4d8d-ba22-4ef617270f72","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca41358a-9fd9-49d8-9d4b-3b4cd4c101aa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca41358a-9fd9-49d8-9d4b-3b4cd4c101aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca41358a-9fd9-49d8-9d4b-3b4cd4c101aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca41358a-9fd9-49d8-9d4b-3b4cd4c101aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/sub-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca41358a-9fd9-49d8-9d4b-3b4cd4c101aa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca41358a-9fd9-49d8-9d4b-3b4cd4c101aa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca41358a-9fd9-49d8-9d4b-3b4cd4c101aa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-479f6e"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca41358a-9fd9-49d8-9d4b-3b4cd4c101aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca41358a-9fd9-49d8-9d4b-3b4cd4c101aa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca41358a-9fd9-49d8-9d4b-3b4cd4c101aa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c49944b-d5bc-4640-8512-0e660dbe4151","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46544","PortSpecifier":{"PortValue":46544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c49944b-d5bc-4640-8512-0e660dbe4151","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c49944b-d5bc-4640-8512-0e660dbe4151","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46544","PortSpecifier":{"PortValue":46544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384380,"nanos":960825272},"http":{"id":"0c49944b-d5bc-4640-8512-0e660dbe4151","method":"GET","headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c49944b-d5bc-4640-8512-0e660dbe4151","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rKCkv2hcpo3QyIlf_I6HwaKowFVM5Fbod4FeGsYu9slRKE5luj8WmkC8Hodr"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c49944b-d5bc-4640-8512-0e660dbe4151","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4e3cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rKCkv2hcpo3QyIlf_I6HwaKowFVM5Fbod4FeGsYu9slRKE5luj8WmkC8Hodr\"}"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c49944b-d5bc-4640-8512-0e660dbe4151","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4e3cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fd032a4d-d842-4d9b-8d6d-cc3e2ad0aa80","keyName":"e2e-sub-iso-02d19c","subscription":"e2e-b-only-479f6e","tenant":"e2e-shared-b-4e3cf5","userId":"fd032a4d-d842-4d9b-8d6d-cc3e2ad0aa80","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c49944b-d5bc-4640-8512-0e660dbe4151","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c49944b-d5bc-4640-8512-0e660dbe4151","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c49944b-d5bc-4640-8512-0e660dbe4151","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c49944b-d5bc-4640-8512-0e660dbe4151","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e3cf5/sub-test-model-4e3cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c49944b-d5bc-4640-8512-0e660dbe4151","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c49944b-d5bc-4640-8512-0e660dbe4151","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c49944b-d5bc-4640-8512-0e660dbe4151","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-479f6e"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c49944b-d5bc-4640-8512-0e660dbe4151","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c49944b-d5bc-4640-8512-0e660dbe4151","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c49944b-d5bc-4640-8512-0e660dbe4151","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ef26385-8e00-4a92-91e4-6a4a4b45008a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38376","PortSpecifier":{"PortValue":38376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ef26385-8e00-4a92-91e4-6a4a4b45008a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ef26385-8e00-4a92-91e4-6a4a4b45008a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38376","PortSpecifier":{"PortValue":38376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384397,"nanos":288353849},"http":{"id":"6ef26385-8e00-4a92-91e4-6a4a4b45008a","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6ef26385-8e00-4a92-91e4-6a4a4b45008a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ef26385-8e00-4a92-91e4-6a4a4b45008a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ef26385-8e00-4a92-91e4-6a4a4b45008a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ef26385-8e00-4a92-91e4-6a4a4b45008a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ef26385-8e00-4a92-91e4-6a4a4b45008a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ef26385-8e00-4a92-91e4-6a4a4b45008a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/sub-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ef26385-8e00-4a92-91e4-6a4a4b45008a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ef26385-8e00-4a92-91e4-6a4a4b45008a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ef26385-8e00-4a92-91e4-6a4a4b45008a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ef26385-8e00-4a92-91e4-6a4a4b45008a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ef26385-8e00-4a92-91e4-6a4a4b45008a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91ff17c1-c03d-43e3-bf6b-d28a4a942ea9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48214","PortSpecifier":{"PortValue":48214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91ff17c1-c03d-43e3-bf6b-d28a4a942ea9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91ff17c1-c03d-43e3-bf6b-d28a4a942ea9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48214","PortSpecifier":{"PortValue":48214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384397,"nanos":326875456},"http":{"id":"91ff17c1-c03d-43e3-bf6b-d28a4a942ea9","method":"POST","headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"91ff17c1-c03d-43e3-bf6b-d28a4a942ea9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91ff17c1-c03d-43e3-bf6b-d28a4a942ea9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91ff17c1-c03d-43e3-bf6b-d28a4a942ea9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91ff17c1-c03d-43e3-bf6b-d28a4a942ea9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91ff17c1-c03d-43e3-bf6b-d28a4a942ea9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91ff17c1-c03d-43e3-bf6b-d28a4a942ea9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e3cf5/sub-test-model-4e3cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"91ff17c1-c03d-43e3-bf6b-d28a4a942ea9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91ff17c1-c03d-43e3-bf6b-d28a4a942ea9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91ff17c1-c03d-43e3-bf6b-d28a4a942ea9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91ff17c1-c03d-43e3-bf6b-d28a4a942ea9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91ff17c1-c03d-43e3-bf6b-d28a4a942ea9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02c3770c-655e-43c7-a9c0-094ba43e93ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38392","PortSpecifier":{"PortValue":38392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02c3770c-655e-43c7-a9c0-094ba43e93ca","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02c3770c-655e-43c7-a9c0-094ba43e93ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38392","PortSpecifier":{"PortValue":38392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384397,"nanos":364564215},"http":{"id":"02c3770c-655e-43c7-a9c0-094ba43e93ca","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02c3770c-655e-43c7-a9c0-094ba43e93ca","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bOvfkGoXepvapVy6_FVc5iIJByXx5Mid9wOtcY0aBtv1Kdu55aAtSUYK12Rj"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02c3770c-655e-43c7-a9c0-094ba43e93ca","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bOvfkGoXepvapVy6_FVc5iIJByXx5Mid9wOtcY0aBtv1Kdu55aAtSUYK12Rj\"}"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02c3770c-655e-43c7-a9c0-094ba43e93ca","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a7c50653-8f52-48e8-98c4-efc3cee67581","keyName":"e2e-sub-iso-2c8260","subscription":"e2e-shared-sub-5ab92a","tenant":"e2e-shared-a-8714ac","userId":"a7c50653-8f52-48e8-98c4-efc3cee67581","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02c3770c-655e-43c7-a9c0-094ba43e93ca","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02c3770c-655e-43c7-a9c0-094ba43e93ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02c3770c-655e-43c7-a9c0-094ba43e93ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02c3770c-655e-43c7-a9c0-094ba43e93ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/sub-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02c3770c-655e-43c7-a9c0-094ba43e93ca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02c3770c-655e-43c7-a9c0-094ba43e93ca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"02c3770c-655e-43c7-a9c0-094ba43e93ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02c3770c-655e-43c7-a9c0-094ba43e93ca","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-5ab92a"}
{"level":"info","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02c3770c-655e-43c7-a9c0-094ba43e93ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02c3770c-655e-43c7-a9c0-094ba43e93ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0c6b15d-a20e-4b18-b9a6-a1f34eb90b84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48216","PortSpecifier":{"PortValue":48216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0c6b15d-a20e-4b18-b9a6-a1f34eb90b84","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0c6b15d-a20e-4b18-b9a6-a1f34eb90b84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48216","PortSpecifier":{"PortValue":48216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384397,"nanos":399480640},"http":{"id":"f0c6b15d-a20e-4b18-b9a6-a1f34eb90b84","method":"POST","headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0c6b15d-a20e-4b18-b9a6-a1f34eb90b84","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6z2jfMpyuSYBo6JK_lMQIXC16PLY7dO5x9NZ6A3fMS1MwaKRMQmCjA1GKAV4"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f0c6b15d-a20e-4b18-b9a6-a1f34eb90b84","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4e3cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6z2jfMpyuSYBo6JK_lMQIXC16PLY7dO5x9NZ6A3fMS1MwaKRMQmCjA1GKAV4\"}"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f0c6b15d-a20e-4b18-b9a6-a1f34eb90b84","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4e3cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4e46a7e5-13ad-43d5-8cd0-2c7af5faedaf","keyName":"e2e-sub-iso-b4b8ef","subscription":"e2e-shared-sub-5ab92a","tenant":"e2e-shared-b-4e3cf5","userId":"4e46a7e5-13ad-43d5-8cd0-2c7af5faedaf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0c6b15d-a20e-4b18-b9a6-a1f34eb90b84","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0c6b15d-a20e-4b18-b9a6-a1f34eb90b84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0c6b15d-a20e-4b18-b9a6-a1f34eb90b84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0c6b15d-a20e-4b18-b9a6-a1f34eb90b84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e3cf5/sub-test-model-4e3cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0c6b15d-a20e-4b18-b9a6-a1f34eb90b84","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0c6b15d-a20e-4b18-b9a6-a1f34eb90b84","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0c6b15d-a20e-4b18-b9a6-a1f34eb90b84","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-5ab92a"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0c6b15d-a20e-4b18-b9a6-a1f34eb90b84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0c6b15d-a20e-4b18-b9a6-a1f34eb90b84","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0c6b15d-a20e-4b18-b9a6-a1f34eb90b84","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e0a3a4d0f4f4f9d1f4c77c9d47f91451a44c90b1e0cd28c03121c320c3534d8"}
{"level":"info","ts":"2026-07-07T00:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3a4e1e7224258e28a49723a30ebb2077f1d1afa7298881f4237e5c06a50e500"}
{"level":"info","ts":"2026-07-07T00:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bda9861e67ca7d2ce11aa129bca8c30e26099190224d41bdfb1494d03db0dff0"}
{"level":"info","ts":"2026-07-07T00:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7439e9b09d73b0fb023aa62a63ab11c39e4c187060ea0f4a001f53a5f5c933b9"}
{"level":"info","ts":"2026-07-07T00:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f008880a1e64c67a0cdcc670458f92bba75395e3ce6575feca2a5e3adaffa3e"}
{"level":"info","ts":"2026-07-07T00:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e93a3f4558947da6a70ae98056a3d7209d46aed3054e069cf71faed270919e2"}
{"level":"info","ts":"2026-07-07T00:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05d572c9197e5667400484237cf2bb52e3a6ee4dbd172e87a8ff8ca3b97e96ec"}
{"level":"info","ts":"2026-07-07T00:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c51be7e09b61bbac5f8e2545407e46b5748c41381d4c26643c8d3579806c33fe"}
{"level":"info","ts":"2026-07-07T00:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1ee930efe222c88a632446c7b002255a8adddba343e1f70b2f1067c13e56d90"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/073714a3810fef32f452069173670ee7e8d5739a3e991b39d2159239acf1141e"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/367a6ffdf1d9b838cf0b3af1dd0b467341dab9def5f912ad40566bc86b7d7e0c"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b035d8d1f9797e98f7d7f20a88edc237b2c55541c3cdbb024a41f67bcd3d3ae"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce02d999f50c6d38c4d268f61317b94e6f74b533e86dc98bf6eea9a1589aca3c"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00cd7aab77f2098064df178b9fdadcd3d884be0dff672d32d47c7e2a26dfdc7a"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/affb306696681f475a06945de782f8e82dcf3a33d805f4e5381dcee7fa28c61b"}
{"level":"info","ts":"2026-07-07T00:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cea5c7f06728eecc54e043f196af570616d867f9157564d6ecdb8bd46c25a90"}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00"}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00"}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00"}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00"}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00"}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00"}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919"}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919"}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919"}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919"}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919"}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919"}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"214f6a43d6d54c6c163792e8a4fa64d5d76aac4cbce81ec930f1b8bed2131ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/214f6a43d6d54c6c163792e8a4fa64d5d76aac4cbce81ec930f1b8bed2131ed2"}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"214f6a43d6d54c6c163792e8a4fa64d5d76aac4cbce81ec930f1b8bed2131ed2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/214f6a43d6d54c6c163792e8a4fa64d5d76aac4cbce81ec930f1b8bed2131ed2"}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"214f6a43d6d54c6c163792e8a4fa64d5d76aac4cbce81ec930f1b8bed2131ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["214f6a43d6d54c6c163792e8a4fa64d5d76aac4cbce81ec930f1b8bed2131ed2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919"}
{"level":"info","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"214f6a43d6d54c6c163792e8a4fa64d5d76aac4cbce81ec930f1b8bed2131ed2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"214f6a43d6d54c6c163792e8a4fa64d5d76aac4cbce81ec930f1b8bed2131ed2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/214f6a43d6d54c6c163792e8a4fa64d5d76aac4cbce81ec930f1b8bed2131ed2"}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3"}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd"}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d"}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd"}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d"}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c170f66df604d794e9b4cae8f2be2b6ba2fa818fd0a519d8bf01051ceccea9c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd"}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c170f66df604d794e9b4cae8f2be2b6ba2fa818fd0a519d8bf01051ceccea9c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3"}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c170f66df604d794e9b4cae8f2be2b6ba2fa818fd0a519d8bf01051ceccea9c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c170f66df604d794e9b4cae8f2be2b6ba2fa818fd0a519d8bf01051ceccea9c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c170f66df604d794e9b4cae8f2be2b6ba2fa818fd0a519d8bf01051ceccea9c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c170f66df604d794e9b4cae8f2be2b6ba2fa818fd0a519d8bf01051ceccea9c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c170f66df604d794e9b4cae8f2be2b6ba2fa818fd0a519d8bf01051ceccea9c2"}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c170f66df604d794e9b4cae8f2be2b6ba2fa818fd0a519d8bf01051ceccea9c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c170f66df604d794e9b4cae8f2be2b6ba2fa818fd0a519d8bf01051ceccea9c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd"}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c170f66df604d794e9b4cae8f2be2b6ba2fa818fd0a519d8bf01051ceccea9c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c170f66df604d794e9b4cae8f2be2b6ba2fa818fd0a519d8bf01051ceccea9c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c170f66df604d794e9b4cae8f2be2b6ba2fa818fd0a519d8bf01051ceccea9c2"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"error","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"}
{"level":"error","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac259df874da3c6097dac9c87686c6c71a7f8b9cb14f75f6892542d77d1f1ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac259df874da3c6097dac9c87686c6c71a7f8b9cb14f75f6892542d77d1f1ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac259df874da3c6097dac9c87686c6c71a7f8b9cb14f75f6892542d77d1f1ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac259df874da3c6097dac9c87686c6c71a7f8b9cb14f75f6892542d77d1f1ee"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac259df874da3c6097dac9c87686c6c71a7f8b9cb14f75f6892542d77d1f1ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac259df874da3c6097dac9c87686c6c71a7f8b9cb14f75f6892542d77d1f1ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ac259df874da3c6097dac9c87686c6c71a7f8b9cb14f75f6892542d77d1f1ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac259df874da3c6097dac9c87686c6c71a7f8b9cb14f75f6892542d77d1f1ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac259df874da3c6097dac9c87686c6c71a7f8b9cb14f75f6892542d77d1f1ee"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac259df874da3c6097dac9c87686c6c71a7f8b9cb14f75f6892542d77d1f1ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac259df874da3c6097dac9c87686c6c71a7f8b9cb14f75f6892542d77d1f1ee"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/450d1dcae4bc9b4316bdfbd5527cffe664475c9e8752160980fc3521cc83780a"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"450d1dcae4bc9b4316bdfbd5527cffe664475c9e8752160980fc3521cc83780a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["450d1dcae4bc9b4316bdfbd5527cffe664475c9e8752160980fc3521cc83780a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"450d1dcae4bc9b4316bdfbd5527cffe664475c9e8752160980fc3521cc83780a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72d79e74f34a632d348b524d093ec6fb528191888bbac10cd719a839954b16ce"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/450d1dcae4bc9b4316bdfbd5527cffe664475c9e8752160980fc3521cc83780a"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72d79e74f34a632d348b524d093ec6fb528191888bbac10cd719a839954b16ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72d79e74f34a632d348b524d093ec6fb528191888bbac10cd719a839954b16ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb5064a8373fd84153014a3ba2af5c18076469051e66914c36e820c0b08a936e"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72d79e74f34a632d348b524d093ec6fb528191888bbac10cd719a839954b16ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"450d1dcae4bc9b4316bdfbd5527cffe664475c9e8752160980fc3521cc83780a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb5064a8373fd84153014a3ba2af5c18076469051e66914c36e820c0b08a936e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb5064a8373fd84153014a3ba2af5c18076469051e66914c36e820c0b08a936e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72d79e74f34a632d348b524d093ec6fb528191888bbac10cd719a839954b16ce"}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb5064a8373fd84153014a3ba2af5c18076469051e66914c36e820c0b08a936e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72d79e74f34a632d348b524d093ec6fb528191888bbac10cd719a839954b16ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb5064a8373fd84153014a3ba2af5c18076469051e66914c36e820c0b08a936e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb5064a8373fd84153014a3ba2af5c18076469051e66914c36e820c0b08a936e"}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3"}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3"}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3"}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f"}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f"}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f"}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f"}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f"}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba"}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd"}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd"}
{"level":"debug","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919"}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"214f6a43d6d54c6c163792e8a4fa64d5d76aac4cbce81ec930f1b8bed2131ed2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/214f6a43d6d54c6c163792e8a4fa64d5d76aac4cbce81ec930f1b8bed2131ed2"}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"450d1dcae4bc9b4316bdfbd5527cffe664475c9e8752160980fc3521cc83780a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/450d1dcae4bc9b4316bdfbd5527cffe664475c9e8752160980fc3521cc83780a"}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac259df874da3c6097dac9c87686c6c71a7f8b9cb14f75f6892542d77d1f1ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac259df874da3c6097dac9c87686c6c71a7f8b9cb14f75f6892542d77d1f1ee"}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"}
{"level":"error","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"error","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00"}
{"level":"error","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c170f66df604d794e9b4cae8f2be2b6ba2fa818fd0a519d8bf01051ceccea9c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"error","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"error","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72d79e74f34a632d348b524d093ec6fb528191888bbac10cd719a839954b16ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb5064a8373fd84153014a3ba2af5c18076469051e66914c36e820c0b08a936e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c170f66df604d794e9b4cae8f2be2b6ba2fa818fd0a519d8bf01051ceccea9c2"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72d79e74f34a632d348b524d093ec6fb528191888bbac10cd719a839954b16ce"}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb5064a8373fd84153014a3ba2af5c18076469051e66914c36e820c0b08a936e"}
{"level":"debug","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d"}
{"level":"info","ts":"2026-07-07T00:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"}
{"level":"info","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fc68989-99f1-41b4-af24-588546d76883","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53644","PortSpecifier":{"PortValue":53644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fc68989-99f1-41b4-af24-588546d76883","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fc68989-99f1-41b4-af24-588546d76883","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53644","PortSpecifier":{"PortValue":53644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384473,"nanos":98824796},"http":{"id":"3fc68989-99f1-41b4-af24-588546d76883","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3fc68989-99f1-41b4-af24-588546d76883","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fc68989-99f1-41b4-af24-588546d76883","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fc68989-99f1-41b4-af24-588546d76883","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fc68989-99f1-41b4-af24-588546d76883","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fc68989-99f1-41b4-af24-588546d76883","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fc68989-99f1-41b4-af24-588546d76883","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3fc68989-99f1-41b4-af24-588546d76883","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fc68989-99f1-41b4-af24-588546d76883","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fc68989-99f1-41b4-af24-588546d76883","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fc68989-99f1-41b4-af24-588546d76883","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fc68989-99f1-41b4-af24-588546d76883","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a181360-a009-4818-9fda-fbc4dd947b95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41516","PortSpecifier":{"PortValue":41516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a181360-a009-4818-9fda-fbc4dd947b95","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a181360-a009-4818-9fda-fbc4dd947b95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41516","PortSpecifier":{"PortValue":41516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384473,"nanos":142011154},"http":{"id":"3a181360-a009-4818-9fda-fbc4dd947b95","method":"POST","headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3a181360-a009-4818-9fda-fbc4dd947b95","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a181360-a009-4818-9fda-fbc4dd947b95","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a181360-a009-4818-9fda-fbc4dd947b95","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a181360-a009-4818-9fda-fbc4dd947b95","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a181360-a009-4818-9fda-fbc4dd947b95","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a181360-a009-4818-9fda-fbc4dd947b95","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e3cf5/rate-test-model-4e3cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3a181360-a009-4818-9fda-fbc4dd947b95","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a181360-a009-4818-9fda-fbc4dd947b95","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a181360-a009-4818-9fda-fbc4dd947b95","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a181360-a009-4818-9fda-fbc4dd947b95","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a181360-a009-4818-9fda-fbc4dd947b95","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53652","PortSpecifier":{"PortValue":53652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58774de9-43bf-4d0b-82a7-e433c993e875","method":"POST","path":"/ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac/v1/completions","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53652","PortSpecifier":{"PortValue":53652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384473,"nanos":185706602},"http":{"id":"58774de9-43bf-4d0b-82a7-e433c993e875","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9QMt7KrI59LtmHgx_N3LoekbZg8MV2EEB9E5VyOiWXndrf5gJy7nVPFfHhqo"}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9QMt7KrI59LtmHgx_N3LoekbZg8MV2EEB9E5VyOiWXndrf5gJy7nVPFfHhqo\"}"}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b371f786-2d46-4161-ad25-5c7bf637337b","keyName":"e2e-rate-a-7de5c5","subscription":"e2e-rate-iso-a-7de5c5","tenant":"e2e-shared-a-8714ac","userId":"b371f786-2d46-4161-ad25-5c7bf637337b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac\",\"requestedSubscription\":\"e2e-rate-iso-a-7de5c5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8714ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7de5c5","namespace":"ai-tenant-e2e-shared-a-8714ac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7de5c5"}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b371f786-2d46-4161-ad25-5c7bf637337b","keyName":"e2e-rate-a-7de5c5","selected_subscription":"e2e-rate-iso-a-7de5c5","selected_subscription_key":"ai-tenant-e2e-shared-a-8714ac/e2e-rate-iso-a-7de5c5@ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8714ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7de5c5","namespace":"ai-tenant-e2e-shared-a-8714ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58774de9-43bf-4d0b-82a7-e433c993e875","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c0593df-5de5-4685-b33f-c161747d23be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53662","PortSpecifier":{"PortValue":53662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c0593df-5de5-4685-b33f-c161747d23be","method":"POST","path":"/ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac/v1/completions","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c0593df-5de5-4685-b33f-c161747d23be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53662","PortSpecifier":{"PortValue":53662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384474,"nanos":251079814},"http":{"id":"3c0593df-5de5-4685-b33f-c161747d23be","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c0593df-5de5-4685-b33f-c161747d23be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9QMt7KrI59LtmHgx_N3LoekbZg8MV2EEB9E5VyOiWXndrf5gJy7nVPFfHhqo"}
{"level":"debug","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c0593df-5de5-4685-b33f-c161747d23be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9QMt7KrI59LtmHgx_N3LoekbZg8MV2EEB9E5VyOiWXndrf5gJy7nVPFfHhqo\"}"}
{"level":"debug","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c0593df-5de5-4685-b33f-c161747d23be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b371f786-2d46-4161-ad25-5c7bf637337b","keyName":"e2e-rate-a-7de5c5","subscription":"e2e-rate-iso-a-7de5c5","tenant":"e2e-shared-a-8714ac","userId":"b371f786-2d46-4161-ad25-5c7bf637337b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c0593df-5de5-4685-b33f-c161747d23be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac\",\"requestedSubscription\":\"e2e-rate-iso-a-7de5c5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c0593df-5de5-4685-b33f-c161747d23be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8714ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7de5c5","namespace":"ai-tenant-e2e-shared-a-8714ac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c0593df-5de5-4685-b33f-c161747d23be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c0593df-5de5-4685-b33f-c161747d23be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c0593df-5de5-4685-b33f-c161747d23be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c0593df-5de5-4685-b33f-c161747d23be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c0593df-5de5-4685-b33f-c161747d23be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c0593df-5de5-4685-b33f-c161747d23be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c0593df-5de5-4685-b33f-c161747d23be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7de5c5"}
{"level":"debug","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c0593df-5de5-4685-b33f-c161747d23be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c0593df-5de5-4685-b33f-c161747d23be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b371f786-2d46-4161-ad25-5c7bf637337b","keyName":"e2e-rate-a-7de5c5","selected_subscription":"e2e-rate-iso-a-7de5c5","selected_subscription_key":"ai-tenant-e2e-shared-a-8714ac/e2e-rate-iso-a-7de5c5@ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8714ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7de5c5","namespace":"ai-tenant-e2e-shared-a-8714ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c0593df-5de5-4685-b33f-c161747d23be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c0593df-5de5-4685-b33f-c161747d23be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53664","PortSpecifier":{"PortValue":53664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","method":"POST","path":"/ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac/v1/completions","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53664","PortSpecifier":{"PortValue":53664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384475,"nanos":294460581},"http":{"id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9QMt7KrI59LtmHgx_N3LoekbZg8MV2EEB9E5VyOiWXndrf5gJy7nVPFfHhqo"}
{"level":"debug","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9QMt7KrI59LtmHgx_N3LoekbZg8MV2EEB9E5VyOiWXndrf5gJy7nVPFfHhqo\"}"}
{"level":"debug","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b371f786-2d46-4161-ad25-5c7bf637337b","keyName":"e2e-rate-a-7de5c5","subscription":"e2e-rate-iso-a-7de5c5","tenant":"e2e-shared-a-8714ac","userId":"b371f786-2d46-4161-ad25-5c7bf637337b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac\",\"requestedSubscription\":\"e2e-rate-iso-a-7de5c5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8714ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7de5c5","namespace":"ai-tenant-e2e-shared-a-8714ac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7de5c5"}
{"level":"debug","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b371f786-2d46-4161-ad25-5c7bf637337b","keyName":"e2e-rate-a-7de5c5","selected_subscription":"e2e-rate-iso-a-7de5c5","selected_subscription_key":"ai-tenant-e2e-shared-a-8714ac/e2e-rate-iso-a-7de5c5@ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8714ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7de5c5","namespace":"ai-tenant-e2e-shared-a-8714ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb7da801-cfed-48ae-ba55-a48e252eeeae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"503a2c74-b81d-444d-a225-832ab42d7398","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55380","PortSpecifier":{"PortValue":55380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"503a2c74-b81d-444d-a225-832ab42d7398","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"503a2c74-b81d-444d-a225-832ab42d7398","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55380","PortSpecifier":{"PortValue":55380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384486,"nanos":80761749},"http":{"id":"503a2c74-b81d-444d-a225-832ab42d7398","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"503a2c74-b81d-444d-a225-832ab42d7398","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"503a2c74-b81d-444d-a225-832ab42d7398","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"503a2c74-b81d-444d-a225-832ab42d7398","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"503a2c74-b81d-444d-a225-832ab42d7398","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"503a2c74-b81d-444d-a225-832ab42d7398","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"503a2c74-b81d-444d-a225-832ab42d7398","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"503a2c74-b81d-444d-a225-832ab42d7398","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"503a2c74-b81d-444d-a225-832ab42d7398","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"503a2c74-b81d-444d-a225-832ab42d7398","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"503a2c74-b81d-444d-a225-832ab42d7398","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"503a2c74-b81d-444d-a225-832ab42d7398","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01ed9da5-a7f8-4f88-9089-ea99c8d3e2a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45306","PortSpecifier":{"PortValue":45306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01ed9da5-a7f8-4f88-9089-ea99c8d3e2a7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01ed9da5-a7f8-4f88-9089-ea99c8d3e2a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45306","PortSpecifier":{"PortValue":45306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384486,"nanos":118021697},"http":{"id":"01ed9da5-a7f8-4f88-9089-ea99c8d3e2a7","method":"POST","headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"01ed9da5-a7f8-4f88-9089-ea99c8d3e2a7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01ed9da5-a7f8-4f88-9089-ea99c8d3e2a7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"]}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01ed9da5-a7f8-4f88-9089-ea99c8d3e2a7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6298cd5bafd4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=059be7a1-a4e7-489f-a734-1d0e1280ccb9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"71e3078a-a5aa-4f77-8110-ce1a07ff5068","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01ed9da5-a7f8-4f88-9089-ea99c8d3e2a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01ed9da5-a7f8-4f88-9089-ea99c8d3e2a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01ed9da5-a7f8-4f88-9089-ea99c8d3e2a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e3cf5/rate-test-model-4e3cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01ed9da5-a7f8-4f88-9089-ea99c8d3e2a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01ed9da5-a7f8-4f88-9089-ea99c8d3e2a7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01ed9da5-a7f8-4f88-9089-ea99c8d3e2a7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01ed9da5-a7f8-4f88-9089-ea99c8d3e2a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01ed9da5-a7f8-4f88-9089-ea99c8d3e2a7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55388","PortSpecifier":{"PortValue":55388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6f7dbe0-2387-4704-929f-69fd94f04165","method":"POST","path":"/ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac/v1/completions","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55388","PortSpecifier":{"PortValue":55388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384486,"nanos":153845074},"http":{"id":"b6f7dbe0-2387-4704-929f-69fd94f04165","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-w7oGl1upYYxOAm1S_oSBXgc51fJUPTl9oDI6NdNefrTwgDZ1xh1DF7wiVt0J"}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-w7oGl1upYYxOAm1S_oSBXgc51fJUPTl9oDI6NdNefrTwgDZ1xh1DF7wiVt0J\"}"}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ca7f7884-cb87-40dd-92a9-2a9cc7174984","keyName":"e2e-rate-a-e04d79","subscription":"e2e-rate-iso-a-e04d79","tenant":"e2e-shared-a-8714ac","userId":"ca7f7884-cb87-40dd-92a9-2a9cc7174984","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac\",\"requestedSubscription\":\"e2e-rate-iso-a-e04d79\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8714ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e04d79","namespace":"ai-tenant-e2e-shared-a-8714ac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e04d79"}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ca7f7884-cb87-40dd-92a9-2a9cc7174984","keyName":"e2e-rate-a-e04d79","selected_subscription":"e2e-rate-iso-a-e04d79","selected_subscription_key":"ai-tenant-e2e-shared-a-8714ac/e2e-rate-iso-a-e04d79@ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8714ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e04d79","namespace":"ai-tenant-e2e-shared-a-8714ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6f7dbe0-2387-4704-929f-69fd94f04165","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55394","PortSpecifier":{"PortValue":55394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","method":"POST","path":"/ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac/v1/completions","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55394","PortSpecifier":{"PortValue":55394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384487,"nanos":198414707},"http":{"id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-w7oGl1upYYxOAm1S_oSBXgc51fJUPTl9oDI6NdNefrTwgDZ1xh1DF7wiVt0J"}
{"level":"debug","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-w7oGl1upYYxOAm1S_oSBXgc51fJUPTl9oDI6NdNefrTwgDZ1xh1DF7wiVt0J\"}"}
{"level":"debug","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ca7f7884-cb87-40dd-92a9-2a9cc7174984","keyName":"e2e-rate-a-e04d79","subscription":"e2e-rate-iso-a-e04d79","tenant":"e2e-shared-a-8714ac","userId":"ca7f7884-cb87-40dd-92a9-2a9cc7174984","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac\",\"requestedSubscription\":\"e2e-rate-iso-a-e04d79\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8714ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e04d79","namespace":"ai-tenant-e2e-shared-a-8714ac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e04d79"}
{"level":"debug","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ca7f7884-cb87-40dd-92a9-2a9cc7174984","keyName":"e2e-rate-a-e04d79","selected_subscription":"e2e-rate-iso-a-e04d79","selected_subscription_key":"ai-tenant-e2e-shared-a-8714ac/e2e-rate-iso-a-e04d79@ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8714ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e04d79","namespace":"ai-tenant-e2e-shared-a-8714ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84b605a0-ce20-478e-9d75-6b52149c7f5d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55410","PortSpecifier":{"PortValue":55410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","method":"POST","path":"/ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac/v1/completions","host":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55410","PortSpecifier":{"PortValue":55410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384488,"nanos":237561695},"http":{"id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","method":"POST","headers":{":authority":"e2e-shared-a-8714ac.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-w7oGl1upYYxOAm1S_oSBXgc51fJUPTl9oDI6NdNefrTwgDZ1xh1DF7wiVt0J"}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-w7oGl1upYYxOAm1S_oSBXgc51fJUPTl9oDI6NdNefrTwgDZ1xh1DF7wiVt0J\"}"}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ca7f7884-cb87-40dd-92a9-2a9cc7174984","keyName":"e2e-rate-a-e04d79","subscription":"e2e-rate-iso-a-e04d79","tenant":"e2e-shared-a-8714ac","userId":"ca7f7884-cb87-40dd-92a9-2a9cc7174984","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac\",\"requestedSubscription\":\"e2e-rate-iso-a-e04d79\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8714ac.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8714ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e04d79","namespace":"ai-tenant-e2e-shared-a-8714ac","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e04d79"}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ca7f7884-cb87-40dd-92a9-2a9cc7174984","keyName":"e2e-rate-a-e04d79","selected_subscription":"e2e-rate-iso-a-e04d79","selected_subscription_key":"ai-tenant-e2e-shared-a-8714ac/e2e-rate-iso-a-e04d79@ai-tenant-e2e-shared-a-8714ac/rate-test-model-8714ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8714ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e04d79","namespace":"ai-tenant-e2e-shared-a-8714ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8347ab61-9ad3-4a08-bbdb-17bbb08e830a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45322","PortSpecifier":{"PortValue":45322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","method":"POST","path":"/ai-tenant-e2e-shared-b-4e3cf5/rate-test-model-4e3cf5/v1/completions","host":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45322","PortSpecifier":{"PortValue":45322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384488,"nanos":275412520},"http":{"id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","method":"POST","headers":{":authority":"e2e-shared-b-4e3cf5.apps.9b63f3df-6cc9-45ce-857f-6298cd5bafd4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-4e3cf5/rate-test-model-4e3cf5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13eSj0Fsi2kySvpJ5_GJgm0sF10Q13f0ko971q4N3dusnWqEZ3Xsv9WzEudg6"}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4e3cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13eSj0Fsi2kySvpJ5_GJgm0sF10Q13f0ko971q4N3dusnWqEZ3Xsv9WzEudg6\"}"}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4e3cf5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c065127a-3956-47c0-8814-8495061a60f2","keyName":"e2e-rate-b-e04d79","subscription":"e2e-rate-iso-b-e04d79","tenant":"e2e-shared-b-4e3cf5","userId":"c065127a-3956-47c0-8814-8495061a60f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-4e3cf5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-4e3cf5/rate-test-model-4e3cf5\",\"requestedSubscription\":\"e2e-rate-iso-b-e04d79\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4e3cf5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4e3cf5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e04d79","namespace":"ai-tenant-e2e-shared-b-4e3cf5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e3cf5/rate-test-model-4e3cf5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e04d79"}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c065127a-3956-47c0-8814-8495061a60f2","keyName":"e2e-rate-b-e04d79","selected_subscription":"e2e-rate-iso-b-e04d79","selected_subscription_key":"ai-tenant-e2e-shared-b-4e3cf5/e2e-rate-iso-b-e04d79@ai-tenant-e2e-shared-b-4e3cf5/rate-test-model-4e3cf5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4e3cf5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e04d79","namespace":"ai-tenant-e2e-shared-b-4e3cf5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8e47f3b-b94d-4dce-982d-f93ee9283164","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c170f66df604d794e9b4cae8f2be2b6ba2fa818fd0a519d8bf01051ceccea9c2"}
{"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2ed5da14c400b98ea333d82f6d6b5f36ef18f242e013b553174b1382ce441e3"}
{"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bcc8d6d6997bdb0d7f313a6400a3e5241edc97bfc7dacb2f0e3ffaf56f7eab2"}
{"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/490e031c15a392d81112f904ef84425e57129debc4eed538786a84ec21834125"}
{"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5040c420fb1a5f97f4a2c8ec6c1d10014721b96054a602a5609eb60394b4bfd"}
{"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f71d1f676fa2262493922bef43f5eadcfd76e55862ec0d6056c8ab19d2c0cd4f"}
{"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cabd9c6fd298cbdc23a463d8f0cd21cb815b9d8ba7ab117ffd71d0dc80bf8c80"}
{"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/450d1dcae4bc9b4316bdfbd5527cffe664475c9e8752160980fc3521cc83780a"}
{"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb5064a8373fd84153014a3ba2af5c18076469051e66914c36e820c0b08a936e"}
{"level":"info","ts":"2026-07-07T00:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/276108493cfc3dc86ce227d3c9365ba4e21f727950ef3c677d62c59542b7f919"}
{"level":"info","ts":"2026-07-07T00:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/214f6a43d6d54c6c163792e8a4fa64d5d76aac4cbce81ec930f1b8bed2131ed2"}
{"level":"info","ts":"2026-07-07T00:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff06309c8dd6c638bc70dce781b754ca3a9bf6761eed6cea7fb43cd654fef06d"}
{"level":"info","ts":"2026-07-07T00:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72d79e74f34a632d348b524d093ec6fb528191888bbac10cd719a839954b16ce"}
{"level":"info","ts":"2026-07-07T00:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0f15f10b937f9d203e73424c17ac3e4650a8a02d535a1e152b0105b0bd72a00"}
{"level":"info","ts":"2026-07-07T00:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/704134c6c0f0053510e091916d60c9ebd145ed00dbde2bc7e6827aeb73eaaac3"}
{"level":"info","ts":"2026-07-07T00:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/999830679326b9b0679fa1d021e27017110144789909f7343f2ff1d1a52c8f92"}
{"level":"info","ts":"2026-07-07T00:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bd591415b86c8bea96e766d03719545053299c28a6d0577b28382fa4ef090b0"}
{"level":"info","ts":"2026-07-07T00:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ac259df874da3c6097dac9c87686c6c71a7f8b9cb14f75f6892542d77d1f1ee"}
{"level":"info","ts":"2026-07-07T00:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53e86396cb1c32d8c1365ed360e439817ed5fccf85a5caa2d392c3d5b0b254a4"}
{"level":"info","ts":"2026-07-07T00:35:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0a49bf1cf1dee95a9e24a5da05e719834b78750ea3362a17213ae6a2b1239ba"}