--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b8650b6-f80b-4b3c-af18-c24c4545221e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b8650b6-f80b-4b3c-af18-c24c4545221e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b8650b6-f80b-4b3c-af18-c24c4545221e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c6dad944-dd22-49bb-a272-2ee32f0c9687","keyName":"e2e-body-routing-b48493","selected_subscription":"test-model-b48493-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-b48493/test-model-b48493-sub@ai-tenant-e2e-inf-a-b48493/test-model-b48493","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-b48493","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-b48493-sub","namespace":"ai-tenant-e2e-inf-a-b48493","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b8650b6-f80b-4b3c-af18-c24c4545221e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b8650b6-f80b-4b3c-af18-c24c4545221e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95ccd4a7-43f7-42fb-ab0d-694af07a7fae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:56972","PortSpecifier":{"PortValue":56972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95ccd4a7-43f7-42fb-ab0d-694af07a7fae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-b48493.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95ccd4a7-43f7-42fb-ab0d-694af07a7fae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:56972","PortSpecifier":{"PortValue":56972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383761,"nanos":735855674},"http":{"id":"95ccd4a7-43f7-42fb-ab0d-694af07a7fae","method":"POST","headers":{":authority":"e2e-inf-a-b48493.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"95ccd4a7-43f7-42fb-ab0d-694af07a7fae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95ccd4a7-43f7-42fb-ab0d-694af07a7fae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95ccd4a7-43f7-42fb-ab0d-694af07a7fae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bd17323c5c032888ea1f742a575aa45c8699cf587751074149bcaa10ee72d57c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-b48493.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95ccd4a7-43f7-42fb-ab0d-694af07a7fae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95ccd4a7-43f7-42fb-ab0d-694af07a7fae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95ccd4a7-43f7-42fb-ab0d-694af07a7fae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-b48493/test-model-b48493\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"95ccd4a7-43f7-42fb-ab0d-694af07a7fae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95ccd4a7-43f7-42fb-ab0d-694af07a7fae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95ccd4a7-43f7-42fb-ab0d-694af07a7fae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95ccd4a7-43f7-42fb-ab0d-694af07a7fae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95ccd4a7-43f7-42fb-ab0d-694af07a7fae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:56984","PortSpecifier":{"PortValue":56984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","method":"POST","path":"/ai-tenant-e2e-inf-a-b48493/test-model-b48493/v1/chat/completions","host":"e2e-inf-a-b48493.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:56984","PortSpecifier":{"PortValue":56984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383765,"nanos":778199817},"http":{"id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","method":"POST","headers":{":authority":"e2e-inf-a-b48493.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-b48493/test-model-b48493/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cvxiIbdIxb8WxumY_fW3tf5QyqweyI7sNZLDHbi1ya6m514A7Bkc3KD4Hst6"}
{"level":"debug","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-b48493.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cvxiIbdIxb8WxumY_fW3tf5QyqweyI7sNZLDHbi1ya6m514A7Bkc3KD4Hst6\"}"}
{"level":"debug","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-b48493.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4fd9f265-ca66-40a6-b965-545f31885c7a","keyName":"e2e-body-routing-b48493","subscription":"test-model-b48493-sub","tenant":"e2e-inf-a-b48493","userId":"4fd9f265-ca66-40a6-b965-545f31885c7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-b48493.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-b48493/test-model-b48493\",\"requestedSubscription\":\"test-model-b48493-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-b48493.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-b48493","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-b48493-sub","namespace":"ai-tenant-e2e-inf-a-b48493","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-b48493/test-model-b48493\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-b48493-sub"}
{"level":"debug","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4fd9f265-ca66-40a6-b965-545f31885c7a","keyName":"e2e-body-routing-b48493","selected_subscription":"test-model-b48493-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-b48493/test-model-b48493-sub@ai-tenant-e2e-inf-a-b48493/test-model-b48493","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-b48493","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-b48493-sub","namespace":"ai-tenant-e2e-inf-a-b48493","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b7d147a-6c14-44ea-b85f-5d355fbc751e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8a0ecdea4af469b46322d1e3993b47562e2c1065a02e4507f1f30f63dfc4ce5"}
{"level":"info","ts":"2026-07-07T00:22:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95464bcd2758722ef2078d7bf55957bd64cfc5266a72c69cca20d4d4c002a589"}
{"level":"info","ts":"2026-07-07T00:22:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/116a9c8f9d037b7c0ebd6bc69f11c78be47a8ff6206ad5132e62d2c3db312239"}
{"level":"info","ts":"2026-07-07T00:22:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2a27584be9b624330e5770920c34ac5f9fea8749ac609075e12d5d4d8d66302"}
{"level":"info","ts":"2026-07-07T00:22:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e078ccc6f2f9e28f5b8546c749cbaa7c4aa46c9b66e0a8bc336401406dc96cb"}
{"level":"info","ts":"2026-07-07T00:22:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffc4a7885f6f4ba8ac7a009341423af5822d2c03afa4dcfd38634dae1b7a2ea8"}
{"level":"info","ts":"2026-07-07T00:22:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94a014f124d0c96dcf393a93c14b7b53349b1eb15b4f331e77446b77df282d13"}
{"level":"info","ts":"2026-07-07T00:22:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab6a8d02a0c07de589bea12b92e25361c0e323e8e23e60484dd894f90b1ae8da"}
{"level":"info","ts":"2026-07-07T00:22:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e08fcffcbd5e60fddc52118555f8cb671b9aca9dd17778206e577860b4039376"}
{"level":"info","ts":"2026-07-07T00:22:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27f4dbd9faa9ad40ad8b3e35cefe866091dae53553a3ece3926d97c3d78873d0"}
{"level":"info","ts":"2026-07-07T00:22:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a82e4f588f673378977f22b73626eca03ded39c88129c46a15cf7103d681210"}
{"level":"info","ts":"2026-07-07T00:22:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e09e3b0e2adcd039cf2e5817448c193436b3337de5d2c37b75f1cb88eecbebe"}
{"level":"info","ts":"2026-07-07T00:22:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6734e1b8dd146f0cbee5850c71db7307dc191716b60941837ff3c38019fcca5"}
{"level":"info","ts":"2026-07-07T00:22:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c821dc41c833f80eb9fdd8715f7b0a706a8cfcaefc056518ec2f07c84f5f8a52"}
{"level":"info","ts":"2026-07-07T00:22:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2354c291764451a1e85a968c4eac6b5e88dc11a83c30633830730330708d78c2"}
{"level":"info","ts":"2026-07-07T00:22:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd17323c5c032888ea1f742a575aa45c8699cf587751074149bcaa10ee72d57c"}
{"level":"info","ts":"2026-07-07T00:22:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60b3f54c62468634bf18945bd6754fef9f2fcca6d012b4ec3b936e0914c56d89"}
{"level":"info","ts":"2026-07-07T00:22:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c6918560e3b862e39ea8fb8529e7eef207a5526d6f44f551a2be6cb81a6ff30"}
{"level":"info","ts":"2026-07-07T00:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15ff279446092f92061eea2b9a4dbe32421a6bdea7df44b19e5567d85c38d370"}
{"level":"info","ts":"2026-07-07T00:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/540a22f683d0cad9537f27729f7444dc4a4f15cf87758009b6c324eb27d142ea"}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0"}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0"}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0"}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0"}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3"}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0"}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3"}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3"}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3"}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3"}
{"level":"debug","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142"}
{"level":"info","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142"}
{"level":"debug","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142"}
{"level":"debug","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142"}
{"level":"debug","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c83c6ad1ff367031c774c816eb3ce328a57e87a2fd04acd41296f640eb77ea01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c83c6ad1ff367031c774c816eb3ce328a57e87a2fd04acd41296f640eb77ea01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c83c6ad1ff367031c774c816eb3ce328a57e87a2fd04acd41296f640eb77ea01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c83c6ad1ff367031c774c816eb3ce328a57e87a2fd04acd41296f640eb77ea01"}
{"level":"debug","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c83c6ad1ff367031c774c816eb3ce328a57e87a2fd04acd41296f640eb77ea01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c83c6ad1ff367031c774c816eb3ce328a57e87a2fd04acd41296f640eb77ea01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c83c6ad1ff367031c774c816eb3ce328a57e87a2fd04acd41296f640eb77ea01"}
{"level":"debug","ts":"2026-07-07T00:24:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c83c6ad1ff367031c774c816eb3ce328a57e87a2fd04acd41296f640eb77ea01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c83c6ad1ff367031c774c816eb3ce328a57e87a2fd04acd41296f640eb77ea01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c83c6ad1ff367031c774c816eb3ce328a57e87a2fd04acd41296f640eb77ea01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c83c6ad1ff367031c774c816eb3ce328a57e87a2fd04acd41296f640eb77ea01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c83c6ad1ff367031c774c816eb3ce328a57e87a2fd04acd41296f640eb77ea01"}
{"level":"info","ts":"2026-07-07T00:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce8595ff7aef05816460e6308af0267f33cdc7df130717291847bbb5de0aabc0"}
{"level":"info","ts":"2026-07-07T00:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de87f802a490f709994410691d5cac7852a00a2a859f603b38c07b2f10178db3"}
{"level":"info","ts":"2026-07-07T00:24:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c83c6ad1ff367031c774c816eb3ce328a57e87a2fd04acd41296f640eb77ea01"}
{"level":"info","ts":"2026-07-07T00:24:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff2a9e53f95e542fb0f5c0d9a3e9e9e36af40aab67077fd5df4433ccba7a4142"}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1"}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1"}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1"}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1"}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c70701c173298200fc961a608e4e5518e0adc2386e8cdc28f8fd9b03ceeb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1"}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c70701c173298200fc961a608e4e5518e0adc2386e8cdc28f8fd9b03ceeb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c70701c173298200fc961a608e4e5518e0adc2386e8cdc28f8fd9b03ceeb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c70701c173298200fc961a608e4e5518e0adc2386e8cdc28f8fd9b03ceeb56"}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c70701c173298200fc961a608e4e5518e0adc2386e8cdc28f8fd9b03ceeb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c70701c173298200fc961a608e4e5518e0adc2386e8cdc28f8fd9b03ceeb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7c70701c173298200fc961a608e4e5518e0adc2386e8cdc28f8fd9b03ceeb56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1"}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c70701c173298200fc961a608e4e5518e0adc2386e8cdc28f8fd9b03ceeb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c70701c173298200fc961a608e4e5518e0adc2386e8cdc28f8fd9b03ceeb56"}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c70701c173298200fc961a608e4e5518e0adc2386e8cdc28f8fd9b03ceeb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1"}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c70701c173298200fc961a608e4e5518e0adc2386e8cdc28f8fd9b03ceeb56"}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1"}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1"}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1"}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9"}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9"}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9"}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3"}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3"}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9"}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3"}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b3ad32e11e3796c6056d74c85f0f49a2f90538cc53f6d8ad193d1ff871e528","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b3ad32e11e3796c6056d74c85f0f49a2f90538cc53f6d8ad193d1ff871e528","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b3ad32e11e3796c6056d74c85f0f49a2f90538cc53f6d8ad193d1ff871e528","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b3ad32e11e3796c6056d74c85f0f49a2f90538cc53f6d8ad193d1ff871e528","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3"}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b3ad32e11e3796c6056d74c85f0f49a2f90538cc53f6d8ad193d1ff871e528","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b3ad32e11e3796c6056d74c85f0f49a2f90538cc53f6d8ad193d1ff871e528"}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b3ad32e11e3796c6056d74c85f0f49a2f90538cc53f6d8ad193d1ff871e528","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b3ad32e11e3796c6056d74c85f0f49a2f90538cc53f6d8ad193d1ff871e528","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b3ad32e11e3796c6056d74c85f0f49a2f90538cc53f6d8ad193d1ff871e528"}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b3ad32e11e3796c6056d74c85f0f49a2f90538cc53f6d8ad193d1ff871e528","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02b3ad32e11e3796c6056d74c85f0f49a2f90538cc53f6d8ad193d1ff871e528"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3"}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b3ad32e11e3796c6056d74c85f0f49a2f90538cc53f6d8ad193d1ff871e528","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"544f36657508c6e0431284f12b240c07dcc57aa7ea5253ed28d45a9a9638d83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"544f36657508c6e0431284f12b240c07dcc57aa7ea5253ed28d45a9a9638d83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b3ad32e11e3796c6056d74c85f0f49a2f90538cc53f6d8ad193d1ff871e528","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"544f36657508c6e0431284f12b240c07dcc57aa7ea5253ed28d45a9a9638d83b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/544f36657508c6e0431284f12b240c07dcc57aa7ea5253ed28d45a9a9638d83b"}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"544f36657508c6e0431284f12b240c07dcc57aa7ea5253ed28d45a9a9638d83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["544f36657508c6e0431284f12b240c07dcc57aa7ea5253ed28d45a9a9638d83b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"544f36657508c6e0431284f12b240c07dcc57aa7ea5253ed28d45a9a9638d83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"544f36657508c6e0431284f12b240c07dcc57aa7ea5253ed28d45a9a9638d83b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b3ad32e11e3796c6056d74c85f0f49a2f90538cc53f6d8ad193d1ff871e528"}
{"level":"info","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/544f36657508c6e0431284f12b240c07dcc57aa7ea5253ed28d45a9a9638d83b"}
{"level":"debug","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcceeaff070a1b6b93ead3b231bda17cb2389a2c85c982dbca8ae5ee5203bc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcceeaff070a1b6b93ead3b231bda17cb2389a2c85c982dbca8ae5ee5203bc2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e44486a8610dfa04a8a01b5e6f6c6ef1a667587410412866e4ccb77b430e58c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcceeaff070a1b6b93ead3b231bda17cb2389a2c85c982dbca8ae5ee5203bc2b"}
{"level":"info","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e44486a8610dfa04a8a01b5e6f6c6ef1a667587410412866e4ccb77b430e58c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcceeaff070a1b6b93ead3b231bda17cb2389a2c85c982dbca8ae5ee5203bc2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcceeaff070a1b6b93ead3b231bda17cb2389a2c85c982dbca8ae5ee5203bc2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcceeaff070a1b6b93ead3b231bda17cb2389a2c85c982dbca8ae5ee5203bc2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e44486a8610dfa04a8a01b5e6f6c6ef1a667587410412866e4ccb77b430e58c"}
{"level":"debug","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed34e98c10f082990b175ee0c9da119025130d6f1968ae04419c817aa4f7a9ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed34e98c10f082990b175ee0c9da119025130d6f1968ae04419c817aa4f7a9ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e44486a8610dfa04a8a01b5e6f6c6ef1a667587410412866e4ccb77b430e58c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e44486a8610dfa04a8a01b5e6f6c6ef1a667587410412866e4ccb77b430e58c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcceeaff070a1b6b93ead3b231bda17cb2389a2c85c982dbca8ae5ee5203bc2b"}
{"level":"info","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e44486a8610dfa04a8a01b5e6f6c6ef1a667587410412866e4ccb77b430e58c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcceeaff070a1b6b93ead3b231bda17cb2389a2c85c982dbca8ae5ee5203bc2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed34e98c10f082990b175ee0c9da119025130d6f1968ae04419c817aa4f7a9ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed34e98c10f082990b175ee0c9da119025130d6f1968ae04419c817aa4f7a9ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e44486a8610dfa04a8a01b5e6f6c6ef1a667587410412866e4ccb77b430e58c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed34e98c10f082990b175ee0c9da119025130d6f1968ae04419c817aa4f7a9ac"}
{"level":"debug","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed34e98c10f082990b175ee0c9da119025130d6f1968ae04419c817aa4f7a9ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed34e98c10f082990b175ee0c9da119025130d6f1968ae04419c817aa4f7a9ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed34e98c10f082990b175ee0c9da119025130d6f1968ae04419c817aa4f7a9ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed34e98c10f082990b175ee0c9da119025130d6f1968ae04419c817aa4f7a9ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed34e98c10f082990b175ee0c9da119025130d6f1968ae04419c817aa4f7a9ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ed34e98c10f082990b175ee0c9da119025130d6f1968ae04419c817aa4f7a9ac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ed34e98c10f082990b175ee0c9da119025130d6f1968ae04419c817aa4f7a9ac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed34e98c10f082990b175ee0c9da119025130d6f1968ae04419c817aa4f7a9ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e44486a8610dfa04a8a01b5e6f6c6ef1a667587410412866e4ccb77b430e58c"}
{"level":"debug","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed34e98c10f082990b175ee0c9da119025130d6f1968ae04419c817aa4f7a9ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcceeaff070a1b6b93ead3b231bda17cb2389a2c85c982dbca8ae5ee5203bc2b"}
{"level":"info","ts":"2026-07-07T00:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed34e98c10f082990b175ee0c9da119025130d6f1968ae04419c817aa4f7a9ac"}
{"level":"debug","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be"}
{"level":"debug","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be"}
{"level":"debug","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be"}
{"level":"debug","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be"}
{"level":"debug","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be"}
{"level":"debug","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be"}
{"level":"debug","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be"}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17"}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17"}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"error","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17"}
{"level":"error","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"369d415bcbc9ca0cec26cf5002bb1cc0591a1611a2b3dade5fc9c96da751c975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"369d415bcbc9ca0cec26cf5002bb1cc0591a1611a2b3dade5fc9c96da751c975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"369d415bcbc9ca0cec26cf5002bb1cc0591a1611a2b3dade5fc9c96da751c975","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"369d415bcbc9ca0cec26cf5002bb1cc0591a1611a2b3dade5fc9c96da751c975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"369d415bcbc9ca0cec26cf5002bb1cc0591a1611a2b3dade5fc9c96da751c975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"369d415bcbc9ca0cec26cf5002bb1cc0591a1611a2b3dade5fc9c96da751c975","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/369d415bcbc9ca0cec26cf5002bb1cc0591a1611a2b3dade5fc9c96da751c975"}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"369d415bcbc9ca0cec26cf5002bb1cc0591a1611a2b3dade5fc9c96da751c975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/369d415bcbc9ca0cec26cf5002bb1cc0591a1611a2b3dade5fc9c96da751c975"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9d5a776715b9a1898f399847ec2c6edb6eb56319f7426d08e9b60e20e55bf1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9d5a776715b9a1898f399847ec2c6edb6eb56319f7426d08e9b60e20e55bf1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9d5a776715b9a1898f399847ec2c6edb6eb56319f7426d08e9b60e20e55bf1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9d5a776715b9a1898f399847ec2c6edb6eb56319f7426d08e9b60e20e55bf1c"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9d5a776715b9a1898f399847ec2c6edb6eb56319f7426d08e9b60e20e55bf1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"369d415bcbc9ca0cec26cf5002bb1cc0591a1611a2b3dade5fc9c96da751c975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["369d415bcbc9ca0cec26cf5002bb1cc0591a1611a2b3dade5fc9c96da751c975"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9d5a776715b9a1898f399847ec2c6edb6eb56319f7426d08e9b60e20e55bf1c"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"369d415bcbc9ca0cec26cf5002bb1cc0591a1611a2b3dade5fc9c96da751c975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9d5a776715b9a1898f399847ec2c6edb6eb56319f7426d08e9b60e20e55bf1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9d5a776715b9a1898f399847ec2c6edb6eb56319f7426d08e9b60e20e55bf1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9d5a776715b9a1898f399847ec2c6edb6eb56319f7426d08e9b60e20e55bf1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"369d415bcbc9ca0cec26cf5002bb1cc0591a1611a2b3dade5fc9c96da751c975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9d5a776715b9a1898f399847ec2c6edb6eb56319f7426d08e9b60e20e55bf1c"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9d5a776715b9a1898f399847ec2c6edb6eb56319f7426d08e9b60e20e55bf1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/369d415bcbc9ca0cec26cf5002bb1cc0591a1611a2b3dade5fc9c96da751c975"}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8"}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9d5a776715b9a1898f399847ec2c6edb6eb56319f7426d08e9b60e20e55bf1c"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed24354de845ed55a3a715a5e3c7d2dd387293743fc80138e9d3c2cbfc0d07b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed24354de845ed55a3a715a5e3c7d2dd387293743fc80138e9d3c2cbfc0d07b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed24354de845ed55a3a715a5e3c7d2dd387293743fc80138e9d3c2cbfc0d07b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed24354de845ed55a3a715a5e3c7d2dd387293743fc80138e9d3c2cbfc0d07b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed24354de845ed55a3a715a5e3c7d2dd387293743fc80138e9d3c2cbfc0d07b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed24354de845ed55a3a715a5e3c7d2dd387293743fc80138e9d3c2cbfc0d07b5"}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed24354de845ed55a3a715a5e3c7d2dd387293743fc80138e9d3c2cbfc0d07b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed24354de845ed55a3a715a5e3c7d2dd387293743fc80138e9d3c2cbfc0d07b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed24354de845ed55a3a715a5e3c7d2dd387293743fc80138e9d3c2cbfc0d07b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed24354de845ed55a3a715a5e3c7d2dd387293743fc80138e9d3c2cbfc0d07b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8"}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a68b483db802682f7bcc2c631d572446ebce19fdf16cb14ee04c0cf50568dd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed24354de845ed55a3a715a5e3c7d2dd387293743fc80138e9d3c2cbfc0d07b5"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a68b483db802682f7bcc2c631d572446ebce19fdf16cb14ee04c0cf50568dd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdd1089acb8c3adbf4eae17e56ce3d2d9a5559d99ae045665ae55889861762ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdd1089acb8c3adbf4eae17e56ce3d2d9a5559d99ae045665ae55889861762ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a68b483db802682f7bcc2c631d572446ebce19fdf16cb14ee04c0cf50568dd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a68b483db802682f7bcc2c631d572446ebce19fdf16cb14ee04c0cf50568dd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a68b483db802682f7bcc2c631d572446ebce19fdf16cb14ee04c0cf50568dd9"}
{"level":"info","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdd1089acb8c3adbf4eae17e56ce3d2d9a5559d99ae045665ae55889861762ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdd1089acb8c3adbf4eae17e56ce3d2d9a5559d99ae045665ae55889861762ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a68b483db802682f7bcc2c631d572446ebce19fdf16cb14ee04c0cf50568dd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a68b483db802682f7bcc2c631d572446ebce19fdf16cb14ee04c0cf50568dd9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a68b483db802682f7bcc2c631d572446ebce19fdf16cb14ee04c0cf50568dd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdd1089acb8c3adbf4eae17e56ce3d2d9a5559d99ae045665ae55889861762ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a68b483db802682f7bcc2c631d572446ebce19fdf16cb14ee04c0cf50568dd9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdd1089acb8c3adbf4eae17e56ce3d2d9a5559d99ae045665ae55889861762ef"}
{"level":"debug","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdd1089acb8c3adbf4eae17e56ce3d2d9a5559d99ae045665ae55889861762ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdd1089acb8c3adbf4eae17e56ce3d2d9a5559d99ae045665ae55889861762ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d"}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdd1089acb8c3adbf4eae17e56ce3d2d9a5559d99ae045665ae55889861762ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a68b483db802682f7bcc2c631d572446ebce19fdf16cb14ee04c0cf50568dd9"}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdd1089acb8c3adbf4eae17e56ce3d2d9a5559d99ae045665ae55889861762ef"}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdd1089acb8c3adbf4eae17e56ce3d2d9a5559d99ae045665ae55889861762ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d"}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d"}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d"}
{"level":"debug","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d"}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d"}
{"level":"debug","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d"}
{"level":"info","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f2516c1-1007-425b-b0fd-1e3a914f9d4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:47526","PortSpecifier":{"PortValue":47526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f2516c1-1007-425b-b0fd-1e3a914f9d4d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f2516c1-1007-425b-b0fd-1e3a914f9d4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:47526","PortSpecifier":{"PortValue":47526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383938,"nanos":323251741},"http":{"id":"1f2516c1-1007-425b-b0fd-1e3a914f9d4d","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f2516c1-1007-425b-b0fd-1e3a914f9d4d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f2516c1-1007-425b-b0fd-1e3a914f9d4d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f2516c1-1007-425b-b0fd-1e3a914f9d4d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f2516c1-1007-425b-b0fd-1e3a914f9d4d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f2516c1-1007-425b-b0fd-1e3a914f9d4d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f2516c1-1007-425b-b0fd-1e3a914f9d4d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/auth-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f2516c1-1007-425b-b0fd-1e3a914f9d4d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f2516c1-1007-425b-b0fd-1e3a914f9d4d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f2516c1-1007-425b-b0fd-1e3a914f9d4d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f2516c1-1007-425b-b0fd-1e3a914f9d4d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f2516c1-1007-425b-b0fd-1e3a914f9d4d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c956a4e-2a31-474a-9697-0bf750d30cc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:40382","PortSpecifier":{"PortValue":40382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c956a4e-2a31-474a-9697-0bf750d30cc0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c956a4e-2a31-474a-9697-0bf750d30cc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:40382","PortSpecifier":{"PortValue":40382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383938,"nanos":387168088},"http":{"id":"1c956a4e-2a31-474a-9697-0bf750d30cc0","method":"POST","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1c956a4e-2a31-474a-9697-0bf750d30cc0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c956a4e-2a31-474a-9697-0bf750d30cc0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c956a4e-2a31-474a-9697-0bf750d30cc0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c956a4e-2a31-474a-9697-0bf750d30cc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c956a4e-2a31-474a-9697-0bf750d30cc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c956a4e-2a31-474a-9697-0bf750d30cc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/auth-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c956a4e-2a31-474a-9697-0bf750d30cc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c956a4e-2a31-474a-9697-0bf750d30cc0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c956a4e-2a31-474a-9697-0bf750d30cc0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c956a4e-2a31-474a-9697-0bf750d30cc0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c956a4e-2a31-474a-9697-0bf750d30cc0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63ff8dab-9456-4d98-ac6c-6ee77ac9dcc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:47540","PortSpecifier":{"PortValue":47540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63ff8dab-9456-4d98-ac6c-6ee77ac9dcc5","method":"GET","path":"/maas-api/v1/api-keys/4284d6c8-718d-4d84-acb3-43fbbce55174","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63ff8dab-9456-4d98-ac6c-6ee77ac9dcc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:47540","PortSpecifier":{"PortValue":47540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383938,"nanos":489918731},"http":{"id":"63ff8dab-9456-4d98-ac6c-6ee77ac9dcc5","method":"GET","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4284d6c8-718d-4d84-acb3-43fbbce55174",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"63ff8dab-9456-4d98-ac6c-6ee77ac9dcc5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63ff8dab-9456-4d98-ac6c-6ee77ac9dcc5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63ff8dab-9456-4d98-ac6c-6ee77ac9dcc5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4284d6c8-718d-4d84-acb3-43fbbce55174",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63ff8dab-9456-4d98-ac6c-6ee77ac9dcc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63ff8dab-9456-4d98-ac6c-6ee77ac9dcc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63ff8dab-9456-4d98-ac6c-6ee77ac9dcc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/auth-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"63ff8dab-9456-4d98-ac6c-6ee77ac9dcc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63ff8dab-9456-4d98-ac6c-6ee77ac9dcc5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63ff8dab-9456-4d98-ac6c-6ee77ac9dcc5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63ff8dab-9456-4d98-ac6c-6ee77ac9dcc5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63ff8dab-9456-4d98-ac6c-6ee77ac9dcc5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ab5ae15-29b5-43bd-8159-feecd3c8a80e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:40390","PortSpecifier":{"PortValue":40390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ab5ae15-29b5-43bd-8159-feecd3c8a80e","method":"GET","path":"/maas-api/v1/api-keys/db5daea2-42fa-4810-8b85-6f1f73cea51d","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ab5ae15-29b5-43bd-8159-feecd3c8a80e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:40390","PortSpecifier":{"PortValue":40390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383938,"nanos":528815218},"http":{"id":"4ab5ae15-29b5-43bd-8159-feecd3c8a80e","method":"GET","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/db5daea2-42fa-4810-8b85-6f1f73cea51d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4ab5ae15-29b5-43bd-8159-feecd3c8a80e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ab5ae15-29b5-43bd-8159-feecd3c8a80e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ab5ae15-29b5-43bd-8159-feecd3c8a80e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/db5daea2-42fa-4810-8b85-6f1f73cea51d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ab5ae15-29b5-43bd-8159-feecd3c8a80e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ab5ae15-29b5-43bd-8159-feecd3c8a80e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ab5ae15-29b5-43bd-8159-feecd3c8a80e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/auth-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4ab5ae15-29b5-43bd-8159-feecd3c8a80e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ab5ae15-29b5-43bd-8159-feecd3c8a80e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ab5ae15-29b5-43bd-8159-feecd3c8a80e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ab5ae15-29b5-43bd-8159-feecd3c8a80e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:25:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ab5ae15-29b5-43bd-8159-feecd3c8a80e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b439506-2aa4-44c8-ba40-c6494f683836","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:52534","PortSpecifier":{"PortValue":52534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b439506-2aa4-44c8-ba40-c6494f683836","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b439506-2aa4-44c8-ba40-c6494f683836","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:52534","PortSpecifier":{"PortValue":52534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383955,"nanos":730856964},"http":{"id":"0b439506-2aa4-44c8-ba40-c6494f683836","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0b439506-2aa4-44c8-ba40-c6494f683836","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b439506-2aa4-44c8-ba40-c6494f683836","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b439506-2aa4-44c8-ba40-c6494f683836","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b439506-2aa4-44c8-ba40-c6494f683836","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b439506-2aa4-44c8-ba40-c6494f683836","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b439506-2aa4-44c8-ba40-c6494f683836","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/auth-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0b439506-2aa4-44c8-ba40-c6494f683836","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b439506-2aa4-44c8-ba40-c6494f683836","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b439506-2aa4-44c8-ba40-c6494f683836","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b439506-2aa4-44c8-ba40-c6494f683836","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b439506-2aa4-44c8-ba40-c6494f683836","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0eb2a54e-854d-41ae-a7cd-1fc890bb5390","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:50144","PortSpecifier":{"PortValue":50144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0eb2a54e-854d-41ae-a7cd-1fc890bb5390","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0eb2a54e-854d-41ae-a7cd-1fc890bb5390","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:50144","PortSpecifier":{"PortValue":50144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383955,"nanos":766680415},"http":{"id":"0eb2a54e-854d-41ae-a7cd-1fc890bb5390","method":"POST","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0eb2a54e-854d-41ae-a7cd-1fc890bb5390","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0eb2a54e-854d-41ae-a7cd-1fc890bb5390","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0eb2a54e-854d-41ae-a7cd-1fc890bb5390","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0eb2a54e-854d-41ae-a7cd-1fc890bb5390","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0eb2a54e-854d-41ae-a7cd-1fc890bb5390","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0eb2a54e-854d-41ae-a7cd-1fc890bb5390","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/auth-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0eb2a54e-854d-41ae-a7cd-1fc890bb5390","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0eb2a54e-854d-41ae-a7cd-1fc890bb5390","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0eb2a54e-854d-41ae-a7cd-1fc890bb5390","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0eb2a54e-854d-41ae-a7cd-1fc890bb5390","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0eb2a54e-854d-41ae-a7cd-1fc890bb5390","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1055ff2-bbd1-4058-8afe-6717a394d41e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:52538","PortSpecifier":{"PortValue":52538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1055ff2-bbd1-4058-8afe-6717a394d41e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1055ff2-bbd1-4058-8afe-6717a394d41e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:52538","PortSpecifier":{"PortValue":52538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383955,"nanos":803615778},"http":{"id":"e1055ff2-bbd1-4058-8afe-6717a394d41e","method":"GET","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1055ff2-bbd1-4058-8afe-6717a394d41e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-W5IC9iuaflOP6sfn_iUXdt5vruCVYlZqQSeUYgWqKW4kqw86HgXRI2G9GlHn"}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1055ff2-bbd1-4058-8afe-6717a394d41e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-W5IC9iuaflOP6sfn_iUXdt5vruCVYlZqQSeUYgWqKW4kqw86HgXRI2G9GlHn\"}"}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1055ff2-bbd1-4058-8afe-6717a394d41e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c146a5dd-6c04-4873-a30a-e669c03cffd9","keyName":"e2e-auth-iso-a-39e61c","subscription":"e2e-auth-iso-10f353","tenant":"e2e-shared-a-fced7e","userId":"c146a5dd-6c04-4873-a30a-e669c03cffd9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1055ff2-bbd1-4058-8afe-6717a394d41e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1055ff2-bbd1-4058-8afe-6717a394d41e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1055ff2-bbd1-4058-8afe-6717a394d41e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1055ff2-bbd1-4058-8afe-6717a394d41e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/auth-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1055ff2-bbd1-4058-8afe-6717a394d41e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-10f353"}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1055ff2-bbd1-4058-8afe-6717a394d41e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1055ff2-bbd1-4058-8afe-6717a394d41e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1055ff2-bbd1-4058-8afe-6717a394d41e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1055ff2-bbd1-4058-8afe-6717a394d41e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:25:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1055ff2-bbd1-4058-8afe-6717a394d41e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e777c1b-c748-4220-8eaa-955ed2156874","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:38740","PortSpecifier":{"PortValue":38740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e777c1b-c748-4220-8eaa-955ed2156874","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e777c1b-c748-4220-8eaa-955ed2156874","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:38740","PortSpecifier":{"PortValue":38740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383970,"nanos":855777570},"http":{"id":"9e777c1b-c748-4220-8eaa-955ed2156874","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e777c1b-c748-4220-8eaa-955ed2156874","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e777c1b-c748-4220-8eaa-955ed2156874","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e777c1b-c748-4220-8eaa-955ed2156874","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e777c1b-c748-4220-8eaa-955ed2156874","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e777c1b-c748-4220-8eaa-955ed2156874","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e777c1b-c748-4220-8eaa-955ed2156874","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/auth-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e777c1b-c748-4220-8eaa-955ed2156874","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e777c1b-c748-4220-8eaa-955ed2156874","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e777c1b-c748-4220-8eaa-955ed2156874","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e777c1b-c748-4220-8eaa-955ed2156874","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e777c1b-c748-4220-8eaa-955ed2156874","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c03530a0-4760-448f-b09b-a2dc9afeb154","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:49656","PortSpecifier":{"PortValue":49656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c03530a0-4760-448f-b09b-a2dc9afeb154","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c03530a0-4760-448f-b09b-a2dc9afeb154","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:49656","PortSpecifier":{"PortValue":49656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383970,"nanos":895227567},"http":{"id":"c03530a0-4760-448f-b09b-a2dc9afeb154","method":"POST","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c03530a0-4760-448f-b09b-a2dc9afeb154","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c03530a0-4760-448f-b09b-a2dc9afeb154","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c03530a0-4760-448f-b09b-a2dc9afeb154","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c03530a0-4760-448f-b09b-a2dc9afeb154","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c03530a0-4760-448f-b09b-a2dc9afeb154","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c03530a0-4760-448f-b09b-a2dc9afeb154","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/auth-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c03530a0-4760-448f-b09b-a2dc9afeb154","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c03530a0-4760-448f-b09b-a2dc9afeb154","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c03530a0-4760-448f-b09b-a2dc9afeb154","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c03530a0-4760-448f-b09b-a2dc9afeb154","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c03530a0-4760-448f-b09b-a2dc9afeb154","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33fa798c-ad7a-489b-a2d2-d906da372cca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:49662","PortSpecifier":{"PortValue":49662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33fa798c-ad7a-489b-a2d2-d906da372cca","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33fa798c-ad7a-489b-a2d2-d906da372cca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:49662","PortSpecifier":{"PortValue":49662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383970,"nanos":935953484},"http":{"id":"33fa798c-ad7a-489b-a2d2-d906da372cca","method":"GET","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33fa798c-ad7a-489b-a2d2-d906da372cca","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Uh1lvA7OF8SJAZuR_xqRXWoceL1rLLYDIHfOf7WvRxNQF8NLE25xhNEPcHl0"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"33fa798c-ad7a-489b-a2d2-d906da372cca","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-accfb9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Uh1lvA7OF8SJAZuR_xqRXWoceL1rLLYDIHfOf7WvRxNQF8NLE25xhNEPcHl0\"}"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"33fa798c-ad7a-489b-a2d2-d906da372cca","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-accfb9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33fa798c-ad7a-489b-a2d2-d906da372cca","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33fa798c-ad7a-489b-a2d2-d906da372cca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"33fa798c-ad7a-489b-a2d2-d906da372cca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33fa798c-ad7a-489b-a2d2-d906da372cca","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33fa798c-ad7a-489b-a2d2-d906da372cca","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cad8fe63-2d12-4fc8-878a-f9e0b20e84eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:34894","PortSpecifier":{"PortValue":34894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cad8fe63-2d12-4fc8-878a-f9e0b20e84eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cad8fe63-2d12-4fc8-878a-f9e0b20e84eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:34894","PortSpecifier":{"PortValue":34894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383988,"nanos":159499367},"http":{"id":"cad8fe63-2d12-4fc8-878a-f9e0b20e84eb","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cad8fe63-2d12-4fc8-878a-f9e0b20e84eb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cad8fe63-2d12-4fc8-878a-f9e0b20e84eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cad8fe63-2d12-4fc8-878a-f9e0b20e84eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cad8fe63-2d12-4fc8-878a-f9e0b20e84eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cad8fe63-2d12-4fc8-878a-f9e0b20e84eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cad8fe63-2d12-4fc8-878a-f9e0b20e84eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/auth-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cad8fe63-2d12-4fc8-878a-f9e0b20e84eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cad8fe63-2d12-4fc8-878a-f9e0b20e84eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cad8fe63-2d12-4fc8-878a-f9e0b20e84eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cad8fe63-2d12-4fc8-878a-f9e0b20e84eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cad8fe63-2d12-4fc8-878a-f9e0b20e84eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8638f7e-85ee-4114-9301-71d175b950b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43146","PortSpecifier":{"PortValue":43146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8638f7e-85ee-4114-9301-71d175b950b5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8638f7e-85ee-4114-9301-71d175b950b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43146","PortSpecifier":{"PortValue":43146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383988,"nanos":196426714},"http":{"id":"f8638f7e-85ee-4114-9301-71d175b950b5","method":"POST","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f8638f7e-85ee-4114-9301-71d175b950b5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8638f7e-85ee-4114-9301-71d175b950b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8638f7e-85ee-4114-9301-71d175b950b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8638f7e-85ee-4114-9301-71d175b950b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8638f7e-85ee-4114-9301-71d175b950b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8638f7e-85ee-4114-9301-71d175b950b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/auth-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f8638f7e-85ee-4114-9301-71d175b950b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8638f7e-85ee-4114-9301-71d175b950b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8638f7e-85ee-4114-9301-71d175b950b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8638f7e-85ee-4114-9301-71d175b950b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8638f7e-85ee-4114-9301-71d175b950b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2afc2853-640a-4a75-865f-0e7405f046a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:34902","PortSpecifier":{"PortValue":34902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2afc2853-640a-4a75-865f-0e7405f046a5","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2afc2853-640a-4a75-865f-0e7405f046a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:34902","PortSpecifier":{"PortValue":34902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383988,"nanos":243817046},"http":{"id":"2afc2853-640a-4a75-865f-0e7405f046a5","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2afc2853-640a-4a75-865f-0e7405f046a5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2afc2853-640a-4a75-865f-0e7405f046a5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2afc2853-640a-4a75-865f-0e7405f046a5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2afc2853-640a-4a75-865f-0e7405f046a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2afc2853-640a-4a75-865f-0e7405f046a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2afc2853-640a-4a75-865f-0e7405f046a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/auth-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2afc2853-640a-4a75-865f-0e7405f046a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2afc2853-640a-4a75-865f-0e7405f046a5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2afc2853-640a-4a75-865f-0e7405f046a5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2afc2853-640a-4a75-865f-0e7405f046a5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2afc2853-640a-4a75-865f-0e7405f046a5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2b99214-4aa4-4c9a-aec5-640f63782eba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43148","PortSpecifier":{"PortValue":43148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2b99214-4aa4-4c9a-aec5-640f63782eba","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2b99214-4aa4-4c9a-aec5-640f63782eba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43148","PortSpecifier":{"PortValue":43148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383988,"nanos":276699109},"http":{"id":"c2b99214-4aa4-4c9a-aec5-640f63782eba","method":"POST","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2b99214-4aa4-4c9a-aec5-640f63782eba","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2b99214-4aa4-4c9a-aec5-640f63782eba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2b99214-4aa4-4c9a-aec5-640f63782eba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2b99214-4aa4-4c9a-aec5-640f63782eba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2b99214-4aa4-4c9a-aec5-640f63782eba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2b99214-4aa4-4c9a-aec5-640f63782eba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/auth-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2b99214-4aa4-4c9a-aec5-640f63782eba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2b99214-4aa4-4c9a-aec5-640f63782eba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2b99214-4aa4-4c9a-aec5-640f63782eba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2b99214-4aa4-4c9a-aec5-640f63782eba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2b99214-4aa4-4c9a-aec5-640f63782eba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a00b82a-8e66-43a1-99e4-7b5a0a9a433d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:59296","PortSpecifier":{"PortValue":59296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a00b82a-8e66-43a1-99e4-7b5a0a9a433d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a00b82a-8e66-43a1-99e4-7b5a0a9a433d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:59296","PortSpecifier":{"PortValue":59296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384005,"nanos":491651677},"http":{"id":"0a00b82a-8e66-43a1-99e4-7b5a0a9a433d","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0a00b82a-8e66-43a1-99e4-7b5a0a9a433d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a00b82a-8e66-43a1-99e4-7b5a0a9a433d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a00b82a-8e66-43a1-99e4-7b5a0a9a433d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a00b82a-8e66-43a1-99e4-7b5a0a9a433d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a00b82a-8e66-43a1-99e4-7b5a0a9a433d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a00b82a-8e66-43a1-99e4-7b5a0a9a433d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/auth-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a00b82a-8e66-43a1-99e4-7b5a0a9a433d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a00b82a-8e66-43a1-99e4-7b5a0a9a433d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a00b82a-8e66-43a1-99e4-7b5a0a9a433d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a00b82a-8e66-43a1-99e4-7b5a0a9a433d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a00b82a-8e66-43a1-99e4-7b5a0a9a433d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22d8e9d5-48a4-4b08-ad86-08280c545586","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43902","PortSpecifier":{"PortValue":43902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22d8e9d5-48a4-4b08-ad86-08280c545586","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22d8e9d5-48a4-4b08-ad86-08280c545586","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43902","PortSpecifier":{"PortValue":43902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384005,"nanos":529891219},"http":{"id":"22d8e9d5-48a4-4b08-ad86-08280c545586","method":"POST","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"22d8e9d5-48a4-4b08-ad86-08280c545586","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22d8e9d5-48a4-4b08-ad86-08280c545586","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22d8e9d5-48a4-4b08-ad86-08280c545586","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22d8e9d5-48a4-4b08-ad86-08280c545586","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22d8e9d5-48a4-4b08-ad86-08280c545586","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22d8e9d5-48a4-4b08-ad86-08280c545586","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/auth-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"22d8e9d5-48a4-4b08-ad86-08280c545586","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22d8e9d5-48a4-4b08-ad86-08280c545586","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22d8e9d5-48a4-4b08-ad86-08280c545586","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22d8e9d5-48a4-4b08-ad86-08280c545586","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22d8e9d5-48a4-4b08-ad86-08280c545586","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc8134ce-3334-49b9-abfd-490f36873f8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43912","PortSpecifier":{"PortValue":43912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc8134ce-3334-49b9-abfd-490f36873f8a","method":"GET","path":"/maas-api/v1/api-keys/707a4345-f8bf-471f-9b5e-0de164e64603","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc8134ce-3334-49b9-abfd-490f36873f8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43912","PortSpecifier":{"PortValue":43912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384005,"nanos":568004911},"http":{"id":"dc8134ce-3334-49b9-abfd-490f36873f8a","method":"GET","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/707a4345-f8bf-471f-9b5e-0de164e64603",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dc8134ce-3334-49b9-abfd-490f36873f8a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc8134ce-3334-49b9-abfd-490f36873f8a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc8134ce-3334-49b9-abfd-490f36873f8a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/707a4345-f8bf-471f-9b5e-0de164e64603",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc8134ce-3334-49b9-abfd-490f36873f8a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc8134ce-3334-49b9-abfd-490f36873f8a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc8134ce-3334-49b9-abfd-490f36873f8a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/auth-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc8134ce-3334-49b9-abfd-490f36873f8a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc8134ce-3334-49b9-abfd-490f36873f8a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc8134ce-3334-49b9-abfd-490f36873f8a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc8134ce-3334-49b9-abfd-490f36873f8a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc8134ce-3334-49b9-abfd-490f36873f8a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd37c0f9-16a2-4e1a-a078-da54e3e8c638","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:59300","PortSpecifier":{"PortValue":59300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd37c0f9-16a2-4e1a-a078-da54e3e8c638","method":"GET","path":"/maas-api/v1/api-keys/707a4345-f8bf-471f-9b5e-0de164e64603","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd37c0f9-16a2-4e1a-a078-da54e3e8c638","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:59300","PortSpecifier":{"PortValue":59300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384005,"nanos":603537170},"http":{"id":"fd37c0f9-16a2-4e1a-a078-da54e3e8c638","method":"GET","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/707a4345-f8bf-471f-9b5e-0de164e64603",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd37c0f9-16a2-4e1a-a078-da54e3e8c638","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd37c0f9-16a2-4e1a-a078-da54e3e8c638","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd37c0f9-16a2-4e1a-a078-da54e3e8c638","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/707a4345-f8bf-471f-9b5e-0de164e64603",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd37c0f9-16a2-4e1a-a078-da54e3e8c638","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd37c0f9-16a2-4e1a-a078-da54e3e8c638","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd37c0f9-16a2-4e1a-a078-da54e3e8c638","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/auth-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd37c0f9-16a2-4e1a-a078-da54e3e8c638","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd37c0f9-16a2-4e1a-a078-da54e3e8c638","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd37c0f9-16a2-4e1a-a078-da54e3e8c638","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd37c0f9-16a2-4e1a-a078-da54e3e8c638","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd37c0f9-16a2-4e1a-a078-da54e3e8c638","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30ade127-bb0e-41d0-ba78-d50b6f8a57d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:49788","PortSpecifier":{"PortValue":49788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30ade127-bb0e-41d0-ba78-d50b6f8a57d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30ade127-bb0e-41d0-ba78-d50b6f8a57d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:49788","PortSpecifier":{"PortValue":49788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384022,"nanos":810779895},"http":{"id":"30ade127-bb0e-41d0-ba78-d50b6f8a57d3","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"30ade127-bb0e-41d0-ba78-d50b6f8a57d3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30ade127-bb0e-41d0-ba78-d50b6f8a57d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30ade127-bb0e-41d0-ba78-d50b6f8a57d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30ade127-bb0e-41d0-ba78-d50b6f8a57d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30ade127-bb0e-41d0-ba78-d50b6f8a57d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30ade127-bb0e-41d0-ba78-d50b6f8a57d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/auth-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30ade127-bb0e-41d0-ba78-d50b6f8a57d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30ade127-bb0e-41d0-ba78-d50b6f8a57d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30ade127-bb0e-41d0-ba78-d50b6f8a57d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30ade127-bb0e-41d0-ba78-d50b6f8a57d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30ade127-bb0e-41d0-ba78-d50b6f8a57d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dd63e10-072b-4a71-b3d7-f494bf604889","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:59022","PortSpecifier":{"PortValue":59022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2dd63e10-072b-4a71-b3d7-f494bf604889","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dd63e10-072b-4a71-b3d7-f494bf604889","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:59022","PortSpecifier":{"PortValue":59022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384022,"nanos":849786163},"http":{"id":"2dd63e10-072b-4a71-b3d7-f494bf604889","method":"POST","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2dd63e10-072b-4a71-b3d7-f494bf604889","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2dd63e10-072b-4a71-b3d7-f494bf604889","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2dd63e10-072b-4a71-b3d7-f494bf604889","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dd63e10-072b-4a71-b3d7-f494bf604889","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dd63e10-072b-4a71-b3d7-f494bf604889","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dd63e10-072b-4a71-b3d7-f494bf604889","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/auth-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2dd63e10-072b-4a71-b3d7-f494bf604889","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dd63e10-072b-4a71-b3d7-f494bf604889","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dd63e10-072b-4a71-b3d7-f494bf604889","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dd63e10-072b-4a71-b3d7-f494bf604889","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dd63e10-072b-4a71-b3d7-f494bf604889","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba3b2974-67df-474d-bc36-89ee40ab4ce6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:49802","PortSpecifier":{"PortValue":49802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba3b2974-67df-474d-bc36-89ee40ab4ce6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba3b2974-67df-474d-bc36-89ee40ab4ce6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:49802","PortSpecifier":{"PortValue":49802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384022,"nanos":891223266},"http":{"id":"ba3b2974-67df-474d-bc36-89ee40ab4ce6","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba3b2974-67df-474d-bc36-89ee40ab4ce6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1U3tH31ZGaHXMoIlh_lgNlpdZ82zOF5O3cbYMCEONc7nUCSVxQ51b3YPqAJcA"}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ba3b2974-67df-474d-bc36-89ee40ab4ce6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1U3tH31ZGaHXMoIlh_lgNlpdZ82zOF5O3cbYMCEONc7nUCSVxQ51b3YPqAJcA\"}"}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ba3b2974-67df-474d-bc36-89ee40ab4ce6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"49781e40-3b02-4051-a3d8-850c7cee8819","keyName":"e2e-auth-iso-a-f792c0","subscription":"e2e-auth-iso-f5e672","tenant":"e2e-shared-a-fced7e","userId":"49781e40-3b02-4051-a3d8-850c7cee8819","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba3b2974-67df-474d-bc36-89ee40ab4ce6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba3b2974-67df-474d-bc36-89ee40ab4ce6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba3b2974-67df-474d-bc36-89ee40ab4ce6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba3b2974-67df-474d-bc36-89ee40ab4ce6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/auth-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba3b2974-67df-474d-bc36-89ee40ab4ce6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba3b2974-67df-474d-bc36-89ee40ab4ce6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f5e672"}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba3b2974-67df-474d-bc36-89ee40ab4ce6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba3b2974-67df-474d-bc36-89ee40ab4ce6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba3b2974-67df-474d-bc36-89ee40ab4ce6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba3b2974-67df-474d-bc36-89ee40ab4ce6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4303fda5ef3d1861df4e42196bc8129f6e8e7572c0efe5aaebc2719ee4d07cb3"}
{"level":"info","ts":"2026-07-07T00:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed24354de845ed55a3a715a5e3c7d2dd387293743fc80138e9d3c2cbfc0d07b5"}
{"level":"info","ts":"2026-07-07T00:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/544f36657508c6e0431284f12b240c07dcc57aa7ea5253ed28d45a9a9638d83b"}
{"level":"info","ts":"2026-07-07T00:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02b3ad32e11e3796c6056d74c85f0f49a2f90538cc53f6d8ad193d1ff871e528"}
{"level":"info","ts":"2026-07-07T00:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9d5a776715b9a1898f399847ec2c6edb6eb56319f7426d08e9b60e20e55bf1c"}
{"level":"info","ts":"2026-07-07T00:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcceeaff070a1b6b93ead3b231bda17cb2389a2c85c982dbca8ae5ee5203bc2b"}
{"level":"info","ts":"2026-07-07T00:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7c70701c173298200fc961a608e4e5518e0adc2386e8cdc28f8fd9b03ceeb56"}
{"level":"info","ts":"2026-07-07T00:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ef2da1ec40361f8a6f4920a8c140c4a36f99bf550a47e5cf04860e2e9ebd6be"}
{"level":"info","ts":"2026-07-07T00:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/369d415bcbc9ca0cec26cf5002bb1cc0591a1611a2b3dade5fc9c96da751c975"}
{"level":"info","ts":"2026-07-07T00:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/571fe5af37661a6eec8c9731701d4163287f15bba386d67b8ed433ca9090efa8"}
{"level":"info","ts":"2026-07-07T00:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed34e98c10f082990b175ee0c9da119025130d6f1968ae04419c817aa4f7a9ac"}
{"level":"info","ts":"2026-07-07T00:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a68b483db802682f7bcc2c631d572446ebce19fdf16cb14ee04c0cf50568dd9"}
{"level":"info","ts":"2026-07-07T00:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5d876cde8c89c5686b5a86a2f153a0463ef39277de4eebec6c47a1ad66aadb9"}
{"level":"info","ts":"2026-07-07T00:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8042c3cfa1b6547359ae44e62925a6ba1ae15832fb5a80b38b1a5eaab01270c1"}
{"level":"info","ts":"2026-07-07T00:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57cfd7bae9f3c03d966f6580f8107cb77d1e77110fafa5aff3e78d3820978f17"}
{"level":"info","ts":"2026-07-07T00:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdd1089acb8c3adbf4eae17e56ce3d2d9a5559d99ae045665ae55889861762ef"}
{"level":"debug","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8"}
{"level":"debug","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8"}
{"level":"debug","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8"}
{"level":"debug","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8"}
{"level":"debug","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8"}
{"level":"debug","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2d5aa1e3e1014662dd38d720dc7a3d69f62e19066486fa535a0bb4a4f441aa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2d5aa1e3e1014662dd38d720dc7a3d69f62e19066486fa535a0bb4a4f441aa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2d5aa1e3e1014662dd38d720dc7a3d69f62e19066486fa535a0bb4a4f441aa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2d5aa1e3e1014662dd38d720dc7a3d69f62e19066486fa535a0bb4a4f441aa1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2d5aa1e3e1014662dd38d720dc7a3d69f62e19066486fa535a0bb4a4f441aa1"}
{"level":"debug","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2d5aa1e3e1014662dd38d720dc7a3d69f62e19066486fa535a0bb4a4f441aa1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2d5aa1e3e1014662dd38d720dc7a3d69f62e19066486fa535a0bb4a4f441aa1"}
{"level":"debug","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2d5aa1e3e1014662dd38d720dc7a3d69f62e19066486fa535a0bb4a4f441aa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2d5aa1e3e1014662dd38d720dc7a3d69f62e19066486fa535a0bb4a4f441aa1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2d5aa1e3e1014662dd38d720dc7a3d69f62e19066486fa535a0bb4a4f441aa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2d5aa1e3e1014662dd38d720dc7a3d69f62e19066486fa535a0bb4a4f441aa1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2d5aa1e3e1014662dd38d720dc7a3d69f62e19066486fa535a0bb4a4f441aa1"}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28"}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28"}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28"}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b"}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28"}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b"}
{"level":"error","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28"}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b"}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069"}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28"}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b"}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069"}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f366f260f1201eb503a5fb333e44726cb32cebf5efbe4352eb3d460e0cfa1dac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f366f260f1201eb503a5fb333e44726cb32cebf5efbe4352eb3d460e0cfa1dac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28"}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b"}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f366f260f1201eb503a5fb333e44726cb32cebf5efbe4352eb3d460e0cfa1dac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f366f260f1201eb503a5fb333e44726cb32cebf5efbe4352eb3d460e0cfa1dac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f366f260f1201eb503a5fb333e44726cb32cebf5efbe4352eb3d460e0cfa1dac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f366f260f1201eb503a5fb333e44726cb32cebf5efbe4352eb3d460e0cfa1dac"}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f366f260f1201eb503a5fb333e44726cb32cebf5efbe4352eb3d460e0cfa1dac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f366f260f1201eb503a5fb333e44726cb32cebf5efbe4352eb3d460e0cfa1dac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5"}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f366f260f1201eb503a5fb333e44726cb32cebf5efbe4352eb3d460e0cfa1dac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f366f260f1201eb503a5fb333e44726cb32cebf5efbe4352eb3d460e0cfa1dac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069"}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f366f260f1201eb503a5fb333e44726cb32cebf5efbe4352eb3d460e0cfa1dac"}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5"}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06"}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06"}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06"}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06"}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06"}
{"level":"debug","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5"}
{"level":"info","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5"}
{"level":"info","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5"}
{"level":"debug","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5"}
{"level":"debug","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba583af69e06504b8ebb4dca3d6845b21ffaa05aa4a5ec024d413d3da3647788","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba583af69e06504b8ebb4dca3d6845b21ffaa05aa4a5ec024d413d3da3647788","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba583af69e06504b8ebb4dca3d6845b21ffaa05aa4a5ec024d413d3da3647788","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba583af69e06504b8ebb4dca3d6845b21ffaa05aa4a5ec024d413d3da3647788","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba583af69e06504b8ebb4dca3d6845b21ffaa05aa4a5ec024d413d3da3647788"}
{"level":"debug","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba583af69e06504b8ebb4dca3d6845b21ffaa05aa4a5ec024d413d3da3647788","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba583af69e06504b8ebb4dca3d6845b21ffaa05aa4a5ec024d413d3da3647788"}
{"level":"debug","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba583af69e06504b8ebb4dca3d6845b21ffaa05aa4a5ec024d413d3da3647788","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba583af69e06504b8ebb4dca3d6845b21ffaa05aa4a5ec024d413d3da3647788"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba583af69e06504b8ebb4dca3d6845b21ffaa05aa4a5ec024d413d3da3647788","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba583af69e06504b8ebb4dca3d6845b21ffaa05aa4a5ec024d413d3da3647788","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba583af69e06504b8ebb4dca3d6845b21ffaa05aa4a5ec024d413d3da3647788"}
{"level":"debug","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686"}
{"level":"debug","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686"}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686"}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686"}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686"}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337"}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337"}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32"}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337"}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32"}
{"level":"error","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337"}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32"}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18"}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337"}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32"}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18"}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337"}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32"}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18"}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32"}
{"level":"info","ts":"2026-07-07T00:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18"}
{"level":"debug","ts":"2026-07-07T00:28:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"debug","ts":"2026-07-07T00:28:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"debug","ts":"2026-07-07T00:28:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"debug","ts":"2026-07-07T00:28:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28"}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686"}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686"}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069"}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32"}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e44486a8610dfa04a8a01b5e6f6c6ef1a667587410412866e4ccb77b430e58c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e44486a8610dfa04a8a01b5e6f6c6ef1a667587410412866e4ccb77b430e58c"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5"}
{"level":"error","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5"}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5"}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5"}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b"}
{"level":"debug","ts":"2026-07-07T00:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b"}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2d5aa1e3e1014662dd38d720dc7a3d69f62e19066486fa535a0bb4a4f441aa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18"}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b"}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2d5aa1e3e1014662dd38d720dc7a3d69f62e19066486fa535a0bb4a4f441aa1"}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18"}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8"}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f366f260f1201eb503a5fb333e44726cb32cebf5efbe4352eb3d460e0cfa1dac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8"}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5"}
{"level":"error","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f366f260f1201eb503a5fb333e44726cb32cebf5efbe4352eb3d460e0cfa1dac"}
{"level":"debug","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba583af69e06504b8ebb4dca3d6845b21ffaa05aa4a5ec024d413d3da3647788","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06"}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8"}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d"}
{"level":"info","ts":"2026-07-07T00:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba583af69e06504b8ebb4dca3d6845b21ffaa05aa4a5ec024d413d3da3647788"}
{"level":"info","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"684e7a16-ec6a-4be6-aae1-94188fd11c78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:59980","PortSpecifier":{"PortValue":59980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"684e7a16-ec6a-4be6-aae1-94188fd11c78","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"684e7a16-ec6a-4be6-aae1-94188fd11c78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:59980","PortSpecifier":{"PortValue":59980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384104,"nanos":529227697},"http":{"id":"684e7a16-ec6a-4be6-aae1-94188fd11c78","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"684e7a16-ec6a-4be6-aae1-94188fd11c78","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"684e7a16-ec6a-4be6-aae1-94188fd11c78","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"684e7a16-ec6a-4be6-aae1-94188fd11c78","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"684e7a16-ec6a-4be6-aae1-94188fd11c78","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"684e7a16-ec6a-4be6-aae1-94188fd11c78","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"684e7a16-ec6a-4be6-aae1-94188fd11c78","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/sub-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"684e7a16-ec6a-4be6-aae1-94188fd11c78","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"684e7a16-ec6a-4be6-aae1-94188fd11c78","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"684e7a16-ec6a-4be6-aae1-94188fd11c78","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"684e7a16-ec6a-4be6-aae1-94188fd11c78","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"684e7a16-ec6a-4be6-aae1-94188fd11c78","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f74b0376-a341-4535-bf27-d8e5707fae1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:57480","PortSpecifier":{"PortValue":57480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f74b0376-a341-4535-bf27-d8e5707fae1f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f74b0376-a341-4535-bf27-d8e5707fae1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:57480","PortSpecifier":{"PortValue":57480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384104,"nanos":570822096},"http":{"id":"f74b0376-a341-4535-bf27-d8e5707fae1f","method":"POST","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f74b0376-a341-4535-bf27-d8e5707fae1f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f74b0376-a341-4535-bf27-d8e5707fae1f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f74b0376-a341-4535-bf27-d8e5707fae1f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f74b0376-a341-4535-bf27-d8e5707fae1f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f74b0376-a341-4535-bf27-d8e5707fae1f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f74b0376-a341-4535-bf27-d8e5707fae1f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/sub-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f74b0376-a341-4535-bf27-d8e5707fae1f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f74b0376-a341-4535-bf27-d8e5707fae1f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f74b0376-a341-4535-bf27-d8e5707fae1f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f74b0376-a341-4535-bf27-d8e5707fae1f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f74b0376-a341-4535-bf27-d8e5707fae1f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28c8e275-9ef2-4b3c-b896-d961b261b383","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:59994","PortSpecifier":{"PortValue":59994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28c8e275-9ef2-4b3c-b896-d961b261b383","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28c8e275-9ef2-4b3c-b896-d961b261b383","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:59994","PortSpecifier":{"PortValue":59994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384104,"nanos":610510936},"http":{"id":"28c8e275-9ef2-4b3c-b896-d961b261b383","method":"GET","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28c8e275-9ef2-4b3c-b896-d961b261b383","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-aJdOIWTyeZjiscGx_olcm2ZAMzLtFxPfUi9uTBD8pgNTsaxavaDQdOMRgbYj"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28c8e275-9ef2-4b3c-b896-d961b261b383","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-aJdOIWTyeZjiscGx_olcm2ZAMzLtFxPfUi9uTBD8pgNTsaxavaDQdOMRgbYj\"}"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28c8e275-9ef2-4b3c-b896-d961b261b383","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df5517cf-6895-47c9-abac-0594c30227d2","keyName":"e2e-sub-iso-83a29f","subscription":"e2e-a-only-3ad2b9","tenant":"e2e-shared-a-fced7e","userId":"df5517cf-6895-47c9-abac-0594c30227d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28c8e275-9ef2-4b3c-b896-d961b261b383","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28c8e275-9ef2-4b3c-b896-d961b261b383","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28c8e275-9ef2-4b3c-b896-d961b261b383","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28c8e275-9ef2-4b3c-b896-d961b261b383","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/sub-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28c8e275-9ef2-4b3c-b896-d961b261b383","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28c8e275-9ef2-4b3c-b896-d961b261b383","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28c8e275-9ef2-4b3c-b896-d961b261b383","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-3ad2b9"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28c8e275-9ef2-4b3c-b896-d961b261b383","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28c8e275-9ef2-4b3c-b896-d961b261b383","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28c8e275-9ef2-4b3c-b896-d961b261b383","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e99bdf24-a64e-48cd-9ae0-d8e44fa37c10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:57484","PortSpecifier":{"PortValue":57484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e99bdf24-a64e-48cd-9ae0-d8e44fa37c10","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e99bdf24-a64e-48cd-9ae0-d8e44fa37c10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:57484","PortSpecifier":{"PortValue":57484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384104,"nanos":656401363},"http":{"id":"e99bdf24-a64e-48cd-9ae0-d8e44fa37c10","method":"GET","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e99bdf24-a64e-48cd-9ae0-d8e44fa37c10","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vgN21atmfykx5H42_egK0vzn0muEPq3HPWwYeOcvPYpR1x4wCGxnQizHd4MQ"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e99bdf24-a64e-48cd-9ae0-d8e44fa37c10","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-accfb9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vgN21atmfykx5H42_egK0vzn0muEPq3HPWwYeOcvPYpR1x4wCGxnQizHd4MQ\"}"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e99bdf24-a64e-48cd-9ae0-d8e44fa37c10","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-accfb9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a1fabcef-e0f7-4793-8b70-3b72d6bd6379","keyName":"e2e-sub-iso-0d74a3","subscription":"e2e-b-only-3ad2b9","tenant":"e2e-shared-b-accfb9","userId":"a1fabcef-e0f7-4793-8b70-3b72d6bd6379","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e99bdf24-a64e-48cd-9ae0-d8e44fa37c10","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e99bdf24-a64e-48cd-9ae0-d8e44fa37c10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e99bdf24-a64e-48cd-9ae0-d8e44fa37c10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e99bdf24-a64e-48cd-9ae0-d8e44fa37c10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/sub-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e99bdf24-a64e-48cd-9ae0-d8e44fa37c10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e99bdf24-a64e-48cd-9ae0-d8e44fa37c10","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e99bdf24-a64e-48cd-9ae0-d8e44fa37c10","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-3ad2b9"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e99bdf24-a64e-48cd-9ae0-d8e44fa37c10","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e99bdf24-a64e-48cd-9ae0-d8e44fa37c10","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e99bdf24-a64e-48cd-9ae0-d8e44fa37c10","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c098135d-1d82-4b20-9beb-d8ba37d33b26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:38436","PortSpecifier":{"PortValue":38436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c098135d-1d82-4b20-9beb-d8ba37d33b26","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c098135d-1d82-4b20-9beb-d8ba37d33b26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:38436","PortSpecifier":{"PortValue":38436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384123,"nanos":347883986},"http":{"id":"c098135d-1d82-4b20-9beb-d8ba37d33b26","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c098135d-1d82-4b20-9beb-d8ba37d33b26","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c098135d-1d82-4b20-9beb-d8ba37d33b26","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c098135d-1d82-4b20-9beb-d8ba37d33b26","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c098135d-1d82-4b20-9beb-d8ba37d33b26","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c098135d-1d82-4b20-9beb-d8ba37d33b26","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c098135d-1d82-4b20-9beb-d8ba37d33b26","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/sub-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c098135d-1d82-4b20-9beb-d8ba37d33b26","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c098135d-1d82-4b20-9beb-d8ba37d33b26","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c098135d-1d82-4b20-9beb-d8ba37d33b26","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c098135d-1d82-4b20-9beb-d8ba37d33b26","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c098135d-1d82-4b20-9beb-d8ba37d33b26","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3035daf0-2823-473d-a2b7-4ad4bd481a8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:50476","PortSpecifier":{"PortValue":50476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3035daf0-2823-473d-a2b7-4ad4bd481a8c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3035daf0-2823-473d-a2b7-4ad4bd481a8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:50476","PortSpecifier":{"PortValue":50476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384123,"nanos":390157831},"http":{"id":"3035daf0-2823-473d-a2b7-4ad4bd481a8c","method":"POST","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3035daf0-2823-473d-a2b7-4ad4bd481a8c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3035daf0-2823-473d-a2b7-4ad4bd481a8c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3035daf0-2823-473d-a2b7-4ad4bd481a8c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3035daf0-2823-473d-a2b7-4ad4bd481a8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3035daf0-2823-473d-a2b7-4ad4bd481a8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3035daf0-2823-473d-a2b7-4ad4bd481a8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/sub-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3035daf0-2823-473d-a2b7-4ad4bd481a8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3035daf0-2823-473d-a2b7-4ad4bd481a8c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3035daf0-2823-473d-a2b7-4ad4bd481a8c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3035daf0-2823-473d-a2b7-4ad4bd481a8c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3035daf0-2823-473d-a2b7-4ad4bd481a8c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbbd37ee-c8b3-46dc-aad5-b413cdc98eb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:38446","PortSpecifier":{"PortValue":38446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbbd37ee-c8b3-46dc-aad5-b413cdc98eb4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbbd37ee-c8b3-46dc-aad5-b413cdc98eb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:38446","PortSpecifier":{"PortValue":38446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384123,"nanos":420341472},"http":{"id":"cbbd37ee-c8b3-46dc-aad5-b413cdc98eb4","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbbd37ee-c8b3-46dc-aad5-b413cdc98eb4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Qvrqm74Ez8Hdxc6Y_5J2LAifbqnrKQiuIO5ZjVn4rv41QwSByz0VIfXsE0JX"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbbd37ee-c8b3-46dc-aad5-b413cdc98eb4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Qvrqm74Ez8Hdxc6Y_5J2LAifbqnrKQiuIO5ZjVn4rv41QwSByz0VIfXsE0JX\"}"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbbd37ee-c8b3-46dc-aad5-b413cdc98eb4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b95b5a90-af8d-406c-beb3-c0ea9d3ca225","keyName":"e2e-sub-iso-55c5c5","subscription":"e2e-shared-sub-a508f9","tenant":"e2e-shared-a-fced7e","userId":"b95b5a90-af8d-406c-beb3-c0ea9d3ca225","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbbd37ee-c8b3-46dc-aad5-b413cdc98eb4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbbd37ee-c8b3-46dc-aad5-b413cdc98eb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbbd37ee-c8b3-46dc-aad5-b413cdc98eb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbbd37ee-c8b3-46dc-aad5-b413cdc98eb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/sub-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbbd37ee-c8b3-46dc-aad5-b413cdc98eb4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbbd37ee-c8b3-46dc-aad5-b413cdc98eb4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a508f9"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cbbd37ee-c8b3-46dc-aad5-b413cdc98eb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbbd37ee-c8b3-46dc-aad5-b413cdc98eb4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbbd37ee-c8b3-46dc-aad5-b413cdc98eb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbbd37ee-c8b3-46dc-aad5-b413cdc98eb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4aa54390-085c-455b-a693-adebe822ddfd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:50482","PortSpecifier":{"PortValue":50482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4aa54390-085c-455b-a693-adebe822ddfd","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4aa54390-085c-455b-a693-adebe822ddfd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:50482","PortSpecifier":{"PortValue":50482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384123,"nanos":451773729},"http":{"id":"4aa54390-085c-455b-a693-adebe822ddfd","method":"POST","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4aa54390-085c-455b-a693-adebe822ddfd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-X59c0ApRSZQWDRk1_6T7rzV8t4E6uQjNz9s3Pz5mPNhgWq39EHkfoQ179vaF"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4aa54390-085c-455b-a693-adebe822ddfd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-accfb9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-X59c0ApRSZQWDRk1_6T7rzV8t4E6uQjNz9s3Pz5mPNhgWq39EHkfoQ179vaF\"}"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4aa54390-085c-455b-a693-adebe822ddfd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-accfb9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"41d80b7c-4e11-4175-81b7-d247eaacecfa","keyName":"e2e-sub-iso-cce057","subscription":"e2e-shared-sub-a508f9","tenant":"e2e-shared-b-accfb9","userId":"41d80b7c-4e11-4175-81b7-d247eaacecfa","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4aa54390-085c-455b-a693-adebe822ddfd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4aa54390-085c-455b-a693-adebe822ddfd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4aa54390-085c-455b-a693-adebe822ddfd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4aa54390-085c-455b-a693-adebe822ddfd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/sub-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4aa54390-085c-455b-a693-adebe822ddfd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4aa54390-085c-455b-a693-adebe822ddfd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4aa54390-085c-455b-a693-adebe822ddfd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a508f9"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4aa54390-085c-455b-a693-adebe822ddfd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4aa54390-085c-455b-a693-adebe822ddfd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:28:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4aa54390-085c-455b-a693-adebe822ddfd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"}
{"level":"info","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"}
{"level":"info","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"}
{"level":"debug","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"}
{"level":"debug","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"}
{"level":"debug","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"}
{"level":"debug","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12"}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12"}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6ae92a93399c1aa3d41a57916c1c257b077e200e0a7abf42854e905812fdb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6ae92a93399c1aa3d41a57916c1c257b077e200e0a7abf42854e905812fdb4e"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6ae92a93399c1aa3d41a57916c1c257b077e200e0a7abf42854e905812fdb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6ae92a93399c1aa3d41a57916c1c257b077e200e0a7abf42854e905812fdb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6ae92a93399c1aa3d41a57916c1c257b077e200e0a7abf42854e905812fdb4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6ae92a93399c1aa3d41a57916c1c257b077e200e0a7abf42854e905812fdb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6ae92a93399c1aa3d41a57916c1c257b077e200e0a7abf42854e905812fdb4e"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6ae92a93399c1aa3d41a57916c1c257b077e200e0a7abf42854e905812fdb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6ae92a93399c1aa3d41a57916c1c257b077e200e0a7abf42854e905812fdb4e"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12"}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47"}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b"}
{"level":"error","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28"}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba583af69e06504b8ebb4dca3d6845b21ffaa05aa4a5ec024d413d3da3647788"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2d5aa1e3e1014662dd38d720dc7a3d69f62e19066486fa535a0bb4a4f441aa1"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f366f260f1201eb503a5fb333e44726cb32cebf5efbe4352eb3d460e0cfa1dac"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"error","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d"}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d"}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d"}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0"}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0"}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d"}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0"}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380"}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380"}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380"}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f"}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432"}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f"}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432"}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44"}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f"}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44"}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6ae92a93399c1aa3d41a57916c1c257b077e200e0a7abf42854e905812fdb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6ae92a93399c1aa3d41a57916c1c257b077e200e0a7abf42854e905812fdb4e"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e44486a8610dfa04a8a01b5e6f6c6ef1a667587410412866e4ccb77b430e58c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d"}
{"level":"info","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f"}
{"level":"info","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e44486a8610dfa04a8a01b5e6f6c6ef1a667587410412866e4ccb77b430e58c"}
{"level":"debug","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432"}
{"level":"info","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"}
{"level":"info","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380"}
{"level":"info","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d"}
{"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2b21643-2257-497a-898d-76bd8cf71615","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43738","PortSpecifier":{"PortValue":43738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2b21643-2257-497a-898d-76bd8cf71615","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2b21643-2257-497a-898d-76bd8cf71615","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43738","PortSpecifier":{"PortValue":43738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384174,"nanos":10478430},"http":{"id":"f2b21643-2257-497a-898d-76bd8cf71615","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f2b21643-2257-497a-898d-76bd8cf71615","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2b21643-2257-497a-898d-76bd8cf71615","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2b21643-2257-497a-898d-76bd8cf71615","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2b21643-2257-497a-898d-76bd8cf71615","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2b21643-2257-497a-898d-76bd8cf71615","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2b21643-2257-497a-898d-76bd8cf71615","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f2b21643-2257-497a-898d-76bd8cf71615","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2b21643-2257-497a-898d-76bd8cf71615","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2b21643-2257-497a-898d-76bd8cf71615","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2b21643-2257-497a-898d-76bd8cf71615","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2b21643-2257-497a-898d-76bd8cf71615","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:60082","PortSpecifier":{"PortValue":60082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:60082","PortSpecifier":{"PortValue":60082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384174,"nanos":50262986},"http":{"id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","method":"POST","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/rate-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43750","PortSpecifier":{"PortValue":43750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c53b694-e9eb-4345-96da-a94614c0739b","method":"POST","path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43750","PortSpecifier":{"PortValue":43750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384174,"nanos":96611768},"http":{"id":"0c53b694-e9eb-4345-96da-a94614c0739b","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HEASoPHa3guLDV4_JPPZr2lYPY9KhFvXVL70qy4BrhIwSaR9aLnp16ydMLy"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HEASoPHa3guLDV4_JPPZr2lYPY9KhFvXVL70qy4BrhIwSaR9aLnp16ydMLy\"}"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","keyName":"e2e-rate-a-220723","subscription":"e2e-rate-iso-a-220723","tenant":"e2e-shared-a-fced7e","userId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\",\"requestedSubscription\":\"e2e-rate-iso-a-220723\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-220723","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-220723"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","keyName":"e2e-rate-a-220723","selected_subscription":"e2e-rate-iso-a-220723","selected_subscription_key":"ai-tenant-e2e-shared-a-fced7e/e2e-rate-iso-a-220723@ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-220723","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43764","PortSpecifier":{"PortValue":43764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"127eaef2-493e-400e-abd0-35c60f3b068a","method":"POST","path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43764","PortSpecifier":{"PortValue":43764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384175,"nanos":152278983},"http":{"id":"127eaef2-493e-400e-abd0-35c60f3b068a","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HEASoPHa3guLDV4_JPPZr2lYPY9KhFvXVL70qy4BrhIwSaR9aLnp16ydMLy"}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HEASoPHa3guLDV4_JPPZr2lYPY9KhFvXVL70qy4BrhIwSaR9aLnp16ydMLy\"}"}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","keyName":"e2e-rate-a-220723","subscription":"e2e-rate-iso-a-220723","tenant":"e2e-shared-a-fced7e","userId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\",\"requestedSubscription\":\"e2e-rate-iso-a-220723\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-220723","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-220723"}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","keyName":"e2e-rate-a-220723","selected_subscription":"e2e-rate-iso-a-220723","selected_subscription_key":"ai-tenant-e2e-shared-a-fced7e/e2e-rate-iso-a-220723@ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-220723","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6fac81b-d760-43da-be48-87b731492e30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43778","PortSpecifier":{"PortValue":43778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6fac81b-d760-43da-be48-87b731492e30","method":"POST","path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6fac81b-d760-43da-be48-87b731492e30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43778","PortSpecifier":{"PortValue":43778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384176,"nanos":191596770},"http":{"id":"d6fac81b-d760-43da-be48-87b731492e30","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HEASoPHa3guLDV4_JPPZr2lYPY9KhFvXVL70qy4BrhIwSaR9aLnp16ydMLy"}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HEASoPHa3guLDV4_JPPZr2lYPY9KhFvXVL70qy4BrhIwSaR9aLnp16ydMLy\"}"}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","keyName":"e2e-rate-a-220723","subscription":"e2e-rate-iso-a-220723","tenant":"e2e-shared-a-fced7e","userId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\",\"requestedSubscription\":\"e2e-rate-iso-a-220723\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-220723","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6fac81b-d760-43da-be48-87b731492e30","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-220723"}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","keyName":"e2e-rate-a-220723","selected_subscription":"e2e-rate-iso-a-220723","selected_subscription_key":"ai-tenant-e2e-shared-a-fced7e/e2e-rate-iso-a-220723@ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-220723","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6fac81b-d760-43da-be48-87b731492e30","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6fac81b-d760-43da-be48-87b731492e30","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88521582-7076-4425-8118-1a035fe29264","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58854","PortSpecifier":{"PortValue":58854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88521582-7076-4425-8118-1a035fe29264","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88521582-7076-4425-8118-1a035fe29264","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58854","PortSpecifier":{"PortValue":58854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384187,"nanos":133359489},"http":{"id":"88521582-7076-4425-8118-1a035fe29264","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88521582-7076-4425-8118-1a035fe29264","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88521582-7076-4425-8118-1a035fe29264","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88521582-7076-4425-8118-1a035fe29264","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88521582-7076-4425-8118-1a035fe29264","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88521582-7076-4425-8118-1a035fe29264","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88521582-7076-4425-8118-1a035fe29264","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88521582-7076-4425-8118-1a035fe29264","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88521582-7076-4425-8118-1a035fe29264","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88521582-7076-4425-8118-1a035fe29264","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88521582-7076-4425-8118-1a035fe29264","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88521582-7076-4425-8118-1a035fe29264","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:35568","PortSpecifier":{"PortValue":35568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:35568","PortSpecifier":{"PortValue":35568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384187,"nanos":204059183},"http":{"id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","method":"POST","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/rate-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58864","PortSpecifier":{"PortValue":58864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b0886fc-e026-9509-8827-b1038d032bf0","method":"POST","path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58864","PortSpecifier":{"PortValue":58864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384187,"nanos":243743171},"http":{"id":"4b0886fc-e026-9509-8827-b1038d032bf0","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14mjDchEYGfb1pYp9_P3dVa0gTNvliU5sIqqDF7ZOqSTpCenPTSXtSuFA40QJ"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14mjDchEYGfb1pYp9_P3dVa0gTNvliU5sIqqDF7ZOqSTpCenPTSXtSuFA40QJ\"}"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","keyName":"e2e-rate-a-08013f","subscription":"e2e-rate-iso-a-08013f","tenant":"e2e-shared-a-fced7e","userId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\",\"requestedSubscription\":\"e2e-rate-iso-a-08013f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-08013f","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-08013f"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","keyName":"e2e-rate-a-08013f","selected_subscription":"e2e-rate-iso-a-08013f","selected_subscription_key":"ai-tenant-e2e-shared-a-fced7e/e2e-rate-iso-a-08013f@ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-08013f","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58874","PortSpecifier":{"PortValue":58874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14e32ade-5d04-45f2-a932-cb81d7d47614","method":"POST","path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58874","PortSpecifier":{"PortValue":58874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384188,"nanos":292284322},"http":{"id":"14e32ade-5d04-45f2-a932-cb81d7d47614","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14mjDchEYGfb1pYp9_P3dVa0gTNvliU5sIqqDF7ZOqSTpCenPTSXtSuFA40QJ"}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14mjDchEYGfb1pYp9_P3dVa0gTNvliU5sIqqDF7ZOqSTpCenPTSXtSuFA40QJ\"}"}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","keyName":"e2e-rate-a-08013f","subscription":"e2e-rate-iso-a-08013f","tenant":"e2e-shared-a-fced7e","userId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\",\"requestedSubscription\":\"e2e-rate-iso-a-08013f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-08013f","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-08013f"}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","keyName":"e2e-rate-a-08013f","selected_subscription":"e2e-rate-iso-a-08013f","selected_subscription_key":"ai-tenant-e2e-shared-a-fced7e/e2e-rate-iso-a-08013f@ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-08013f","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"342fcfae-b516-49de-860d-48b00716262e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58890","PortSpecifier":{"PortValue":58890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"342fcfae-b516-49de-860d-48b00716262e","method":"POST","path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"342fcfae-b516-49de-860d-48b00716262e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58890","PortSpecifier":{"PortValue":58890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384189,"nanos":335738142},"http":{"id":"342fcfae-b516-49de-860d-48b00716262e","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14mjDchEYGfb1pYp9_P3dVa0gTNvliU5sIqqDF7ZOqSTpCenPTSXtSuFA40QJ"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"342fcfae-b516-49de-860d-48b00716262e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14mjDchEYGfb1pYp9_P3dVa0gTNvliU5sIqqDF7ZOqSTpCenPTSXtSuFA40QJ\"}"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","keyName":"e2e-rate-a-08013f","subscription":"e2e-rate-iso-a-08013f","tenant":"e2e-shared-a-fced7e","userId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"342fcfae-b516-49de-860d-48b00716262e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\",\"requestedSubscription\":\"e2e-rate-iso-a-08013f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-08013f","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"342fcfae-b516-49de-860d-48b00716262e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-08013f"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","keyName":"e2e-rate-a-08013f","selected_subscription":"e2e-rate-iso-a-08013f","selected_subscription_key":"ai-tenant-e2e-shared-a-fced7e/e2e-rate-iso-a-08013f@ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-08013f","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"342fcfae-b516-49de-860d-48b00716262e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"342fcfae-b516-49de-860d-48b00716262e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:35572","PortSpecifier":{"PortValue":35572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1abce75-95a4-4149-b15e-2d57b69f5934","method":"POST","path":"/ai-tenant-e2e-shared-b-accfb9/rate-test-model-accfb9/v1/completions","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:35572","PortSpecifier":{"PortValue":35572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384189,"nanos":372860951},"http":{"id":"f1abce75-95a4-4149-b15e-2d57b69f5934","method":"POST","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-accfb9/rate-test-model-accfb9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8yzv9UrkWTdQQzaQ_VISe2m1jlVHL77XtaM9M0oOUEZIasmyqO9WMe2EHKu8"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-accfb9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8yzv9UrkWTdQQzaQ_VISe2m1jlVHL77XtaM9M0oOUEZIasmyqO9WMe2EHKu8\"}"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-accfb9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"14523adf-fd85-47d0-aae6-ca7a88e853c4","keyName":"e2e-rate-b-08013f","subscription":"e2e-rate-iso-b-08013f","tenant":"e2e-shared-b-accfb9","userId":"14523adf-fd85-47d0-aae6-ca7a88e853c4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-accfb9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-accfb9/rate-test-model-accfb9\",\"requestedSubscription\":\"e2e-rate-iso-b-08013f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-accfb9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-accfb9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-08013f","namespace":"ai-tenant-e2e-shared-b-accfb9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/rate-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-08013f"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"14523adf-fd85-47d0-aae6-ca7a88e853c4","keyName":"e2e-rate-b-08013f","selected_subscription":"e2e-rate-iso-b-08013f","selected_subscription_key":"ai-tenant-e2e-shared-b-accfb9/e2e-rate-iso-b-08013f@ai-tenant-e2e-shared-b-accfb9/rate-test-model-accfb9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-accfb9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-08013f","namespace":"ai-tenant-e2e-shared-b-accfb9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6ae92a93399c1aa3d41a57916c1c257b077e200e0a7abf42854e905812fdb4e"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e44486a8610dfa04a8a01b5e6f6c6ef1a667587410412866e4ccb77b430e58c"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"info","ts":"2026-07-07T00:30:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d"}
{"level":"info","ts":"2026-07-07T00:30:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}