--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"error","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"}
{"level":"info","ts":"2026-07-22T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"info","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dee1dfe-7ce9-4615-8ef4-03de37e6255d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52466","PortSpecifier":{"PortValue":52466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9dee1dfe-7ce9-4615-8ef4-03de37e6255d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dee1dfe-7ce9-4615-8ef4-03de37e6255d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52466","PortSpecifier":{"PortValue":52466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741002,"nanos":500313986},"http":{"id":"9dee1dfe-7ce9-4615-8ef4-03de37e6255d","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9dee1dfe-7ce9-4615-8ef4-03de37e6255d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9dee1dfe-7ce9-4615-8ef4-03de37e6255d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9dee1dfe-7ce9-4615-8ef4-03de37e6255d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dee1dfe-7ce9-4615-8ef4-03de37e6255d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dee1dfe-7ce9-4615-8ef4-03de37e6255d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dee1dfe-7ce9-4615-8ef4-03de37e6255d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/auth-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9dee1dfe-7ce9-4615-8ef4-03de37e6255d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dee1dfe-7ce9-4615-8ef4-03de37e6255d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dee1dfe-7ce9-4615-8ef4-03de37e6255d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dee1dfe-7ce9-4615-8ef4-03de37e6255d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dee1dfe-7ce9-4615-8ef4-03de37e6255d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61eaee71-0bcf-4a90-8990-4941ed2def0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45336","PortSpecifier":{"PortValue":45336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61eaee71-0bcf-4a90-8990-4941ed2def0a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61eaee71-0bcf-4a90-8990-4941ed2def0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45336","PortSpecifier":{"PortValue":45336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741002,"nanos":534164028},"http":{"id":"61eaee71-0bcf-4a90-8990-4941ed2def0a","method":"POST","headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"61eaee71-0bcf-4a90-8990-4941ed2def0a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61eaee71-0bcf-4a90-8990-4941ed2def0a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61eaee71-0bcf-4a90-8990-4941ed2def0a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61eaee71-0bcf-4a90-8990-4941ed2def0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61eaee71-0bcf-4a90-8990-4941ed2def0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61eaee71-0bcf-4a90-8990-4941ed2def0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-05e61d/auth-test-model-05e61d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-05e61d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"61eaee71-0bcf-4a90-8990-4941ed2def0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61eaee71-0bcf-4a90-8990-4941ed2def0a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61eaee71-0bcf-4a90-8990-4941ed2def0a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61eaee71-0bcf-4a90-8990-4941ed2def0a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61eaee71-0bcf-4a90-8990-4941ed2def0a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e73af5a-0326-4f36-a612-ba5c9eea6f62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45342","PortSpecifier":{"PortValue":45342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e73af5a-0326-4f36-a612-ba5c9eea6f62","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e73af5a-0326-4f36-a612-ba5c9eea6f62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45342","PortSpecifier":{"PortValue":45342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741002,"nanos":568274919},"http":{"id":"7e73af5a-0326-4f36-a612-ba5c9eea6f62","method":"GET","headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e73af5a-0326-4f36-a612-ba5c9eea6f62","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8KLQJi9Vwrp1sFIn_FpXt5nolebZI9QGnJOsNywFL9ZF1udhhTXZ3bTXNVv1"}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7e73af5a-0326-4f36-a612-ba5c9eea6f62","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-05e61d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8KLQJi9Vwrp1sFIn_FpXt5nolebZI9QGnJOsNywFL9ZF1udhhTXZ3bTXNVv1\"}"}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7e73af5a-0326-4f36-a612-ba5c9eea6f62","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-05e61d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e73af5a-0326-4f36-a612-ba5c9eea6f62","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e73af5a-0326-4f36-a612-ba5c9eea6f62","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"7e73af5a-0326-4f36-a612-ba5c9eea6f62","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e73af5a-0326-4f36-a612-ba5c9eea6f62","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-22T17:23:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e73af5a-0326-4f36-a612-ba5c9eea6f62","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-22T17:23:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"info","ts":"2026-07-22T17:23:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:23:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:23:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"info","ts":"2026-07-22T17:23:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"}
{"level":"info","ts":"2026-07-22T17:23:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"}
{"level":"info","ts":"2026-07-22T17:23:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:23:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:23:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca"}
{"level":"info","ts":"2026-07-22T17:23:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"info","ts":"2026-07-22T17:23:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"}
{"level":"info","ts":"2026-07-22T17:23:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"}
{"level":"error","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"error","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"}
{"level":"error","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca"}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca"}
{"level":"info","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddc6ab61-df2d-4d66-bec7-d943256f0321","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35622","PortSpecifier":{"PortValue":35622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ddc6ab61-df2d-4d66-bec7-d943256f0321","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddc6ab61-df2d-4d66-bec7-d943256f0321","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35622","PortSpecifier":{"PortValue":35622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741019,"nanos":918442715},"http":{"id":"ddc6ab61-df2d-4d66-bec7-d943256f0321","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ddc6ab61-df2d-4d66-bec7-d943256f0321","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ddc6ab61-df2d-4d66-bec7-d943256f0321","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ddc6ab61-df2d-4d66-bec7-d943256f0321","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddc6ab61-df2d-4d66-bec7-d943256f0321","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddc6ab61-df2d-4d66-bec7-d943256f0321","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddc6ab61-df2d-4d66-bec7-d943256f0321","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/auth-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ddc6ab61-df2d-4d66-bec7-d943256f0321","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddc6ab61-df2d-4d66-bec7-d943256f0321","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddc6ab61-df2d-4d66-bec7-d943256f0321","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddc6ab61-df2d-4d66-bec7-d943256f0321","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddc6ab61-df2d-4d66-bec7-d943256f0321","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05e32985-d9ac-4dde-b027-6876675ff592","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47442","PortSpecifier":{"PortValue":47442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05e32985-d9ac-4dde-b027-6876675ff592","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05e32985-d9ac-4dde-b027-6876675ff592","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47442","PortSpecifier":{"PortValue":47442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741019,"nanos":953191976},"http":{"id":"05e32985-d9ac-4dde-b027-6876675ff592","method":"POST","headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"05e32985-d9ac-4dde-b027-6876675ff592","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05e32985-d9ac-4dde-b027-6876675ff592","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05e32985-d9ac-4dde-b027-6876675ff592","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05e32985-d9ac-4dde-b027-6876675ff592","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05e32985-d9ac-4dde-b027-6876675ff592","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05e32985-d9ac-4dde-b027-6876675ff592","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-05e61d/auth-test-model-05e61d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-05e61d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05e32985-d9ac-4dde-b027-6876675ff592","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05e32985-d9ac-4dde-b027-6876675ff592","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05e32985-d9ac-4dde-b027-6876675ff592","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05e32985-d9ac-4dde-b027-6876675ff592","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05e32985-d9ac-4dde-b027-6876675ff592","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2afe43d-fdd7-4658-891d-d9a93c34ac42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35630","PortSpecifier":{"PortValue":35630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e2afe43d-fdd7-4658-891d-d9a93c34ac42","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2afe43d-fdd7-4658-891d-d9a93c34ac42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35630","PortSpecifier":{"PortValue":35630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741019,"nanos":988987934},"http":{"id":"e2afe43d-fdd7-4658-891d-d9a93c34ac42","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e2afe43d-fdd7-4658-891d-d9a93c34ac42","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e2afe43d-fdd7-4658-891d-d9a93c34ac42","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e2afe43d-fdd7-4658-891d-d9a93c34ac42","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2afe43d-fdd7-4658-891d-d9a93c34ac42","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2afe43d-fdd7-4658-891d-d9a93c34ac42","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2afe43d-fdd7-4658-891d-d9a93c34ac42","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/auth-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e2afe43d-fdd7-4658-891d-d9a93c34ac42","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2afe43d-fdd7-4658-891d-d9a93c34ac42","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2afe43d-fdd7-4658-891d-d9a93c34ac42","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2afe43d-fdd7-4658-891d-d9a93c34ac42","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:23:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2afe43d-fdd7-4658-891d-d9a93c34ac42","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:23:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba27d28c-b3f8-44c8-9d9f-b754dc58d6cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47456","PortSpecifier":{"PortValue":47456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba27d28c-b3f8-44c8-9d9f-b754dc58d6cf","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:23:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba27d28c-b3f8-44c8-9d9f-b754dc58d6cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47456","PortSpecifier":{"PortValue":47456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741020,"nanos":19230689},"http":{"id":"ba27d28c-b3f8-44c8-9d9f-b754dc58d6cf","method":"POST","headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba27d28c-b3f8-44c8-9d9f-b754dc58d6cf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:23:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba27d28c-b3f8-44c8-9d9f-b754dc58d6cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:23:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba27d28c-b3f8-44c8-9d9f-b754dc58d6cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba27d28c-b3f8-44c8-9d9f-b754dc58d6cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba27d28c-b3f8-44c8-9d9f-b754dc58d6cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba27d28c-b3f8-44c8-9d9f-b754dc58d6cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-05e61d/auth-test-model-05e61d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-05e61d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba27d28c-b3f8-44c8-9d9f-b754dc58d6cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:23:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba27d28c-b3f8-44c8-9d9f-b754dc58d6cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:23:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba27d28c-b3f8-44c8-9d9f-b754dc58d6cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:23:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba27d28c-b3f8-44c8-9d9f-b754dc58d6cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:23:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba27d28c-b3f8-44c8-9d9f-b754dc58d6cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:23:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"}
{"level":"info","ts":"2026-07-22T17:23:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:23:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"}
{"level":"info","ts":"2026-07-22T17:23:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:23:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca"}
{"level":"info","ts":"2026-07-22T17:23:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:23:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"}
{"level":"info","ts":"2026-07-22T17:23:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"info","ts":"2026-07-22T17:23:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:23:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"info","ts":"2026-07-22T17:23:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"}
{"level":"info","ts":"2026-07-22T17:23:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"error","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca"}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca"}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"error","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"977a4ea8-cf38-461f-89a0-f7b31b3f10e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43752","PortSpecifier":{"PortValue":43752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"977a4ea8-cf38-461f-89a0-f7b31b3f10e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"977a4ea8-cf38-461f-89a0-f7b31b3f10e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43752","PortSpecifier":{"PortValue":43752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741037,"nanos":519630447},"http":{"id":"977a4ea8-cf38-461f-89a0-f7b31b3f10e7","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"977a4ea8-cf38-461f-89a0-f7b31b3f10e7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"977a4ea8-cf38-461f-89a0-f7b31b3f10e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"977a4ea8-cf38-461f-89a0-f7b31b3f10e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"977a4ea8-cf38-461f-89a0-f7b31b3f10e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"977a4ea8-cf38-461f-89a0-f7b31b3f10e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"977a4ea8-cf38-461f-89a0-f7b31b3f10e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/auth-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"977a4ea8-cf38-461f-89a0-f7b31b3f10e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"977a4ea8-cf38-461f-89a0-f7b31b3f10e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"977a4ea8-cf38-461f-89a0-f7b31b3f10e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"977a4ea8-cf38-461f-89a0-f7b31b3f10e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"977a4ea8-cf38-461f-89a0-f7b31b3f10e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fa78897-e4a5-47e7-b9da-4c1eef8069d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45094","PortSpecifier":{"PortValue":45094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fa78897-e4a5-47e7-b9da-4c1eef8069d8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fa78897-e4a5-47e7-b9da-4c1eef8069d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45094","PortSpecifier":{"PortValue":45094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741037,"nanos":551441312},"http":{"id":"0fa78897-e4a5-47e7-b9da-4c1eef8069d8","method":"POST","headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0fa78897-e4a5-47e7-b9da-4c1eef8069d8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fa78897-e4a5-47e7-b9da-4c1eef8069d8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fa78897-e4a5-47e7-b9da-4c1eef8069d8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fa78897-e4a5-47e7-b9da-4c1eef8069d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fa78897-e4a5-47e7-b9da-4c1eef8069d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fa78897-e4a5-47e7-b9da-4c1eef8069d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-05e61d/auth-test-model-05e61d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-05e61d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0fa78897-e4a5-47e7-b9da-4c1eef8069d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fa78897-e4a5-47e7-b9da-4c1eef8069d8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fa78897-e4a5-47e7-b9da-4c1eef8069d8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fa78897-e4a5-47e7-b9da-4c1eef8069d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fa78897-e4a5-47e7-b9da-4c1eef8069d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23e6aad2-4744-4934-9043-ddc69908b148","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45102","PortSpecifier":{"PortValue":45102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23e6aad2-4744-4934-9043-ddc69908b148","method":"GET","path":"/maas-api/v1/api-keys/a38ea8fc-3556-40aa-a3b7-0f897b232042","host":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23e6aad2-4744-4934-9043-ddc69908b148","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45102","PortSpecifier":{"PortValue":45102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741037,"nanos":595683072},"http":{"id":"23e6aad2-4744-4934-9043-ddc69908b148","method":"GET","headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a38ea8fc-3556-40aa-a3b7-0f897b232042",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"23e6aad2-4744-4934-9043-ddc69908b148","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23e6aad2-4744-4934-9043-ddc69908b148","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23e6aad2-4744-4934-9043-ddc69908b148","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a38ea8fc-3556-40aa-a3b7-0f897b232042",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23e6aad2-4744-4934-9043-ddc69908b148","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23e6aad2-4744-4934-9043-ddc69908b148","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23e6aad2-4744-4934-9043-ddc69908b148","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-05e61d/auth-test-model-05e61d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-05e61d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"23e6aad2-4744-4934-9043-ddc69908b148","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23e6aad2-4744-4934-9043-ddc69908b148","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23e6aad2-4744-4934-9043-ddc69908b148","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23e6aad2-4744-4934-9043-ddc69908b148","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23e6aad2-4744-4934-9043-ddc69908b148","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b45aa293-33cb-419e-857e-cbb8449604cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43768","PortSpecifier":{"PortValue":43768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b45aa293-33cb-419e-857e-cbb8449604cd","method":"GET","path":"/maas-api/v1/api-keys/a38ea8fc-3556-40aa-a3b7-0f897b232042","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b45aa293-33cb-419e-857e-cbb8449604cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43768","PortSpecifier":{"PortValue":43768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741037,"nanos":628413994},"http":{"id":"b45aa293-33cb-419e-857e-cbb8449604cd","method":"GET","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a38ea8fc-3556-40aa-a3b7-0f897b232042",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b45aa293-33cb-419e-857e-cbb8449604cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b45aa293-33cb-419e-857e-cbb8449604cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b45aa293-33cb-419e-857e-cbb8449604cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a38ea8fc-3556-40aa-a3b7-0f897b232042",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b45aa293-33cb-419e-857e-cbb8449604cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b45aa293-33cb-419e-857e-cbb8449604cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b45aa293-33cb-419e-857e-cbb8449604cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/auth-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b45aa293-33cb-419e-857e-cbb8449604cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b45aa293-33cb-419e-857e-cbb8449604cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b45aa293-33cb-419e-857e-cbb8449604cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b45aa293-33cb-419e-857e-cbb8449604cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:23:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b45aa293-33cb-419e-857e-cbb8449604cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"}
{"level":"info","ts":"2026-07-22T17:24:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"info","ts":"2026-07-22T17:24:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"info","ts":"2026-07-22T17:24:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"}
{"level":"info","ts":"2026-07-22T17:24:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca"}
{"level":"info","ts":"2026-07-22T17:24:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"}
{"level":"info","ts":"2026-07-22T17:24:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"}
{"level":"info","ts":"2026-07-22T17:24:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:24:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"info","ts":"2026-07-22T17:24:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:24:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"debug","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"info","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"info","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"debug","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"info","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"info","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"debug","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"info","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"debug","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"debug","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:24:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:24:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:24:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"}
{"level":"info","ts":"2026-07-22T17:24:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71ae45bc-e5ae-4b07-b205-4ca4e0714291","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33402","PortSpecifier":{"PortValue":33402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71ae45bc-e5ae-4b07-b205-4ca4e0714291","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:24:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71ae45bc-e5ae-4b07-b205-4ca4e0714291","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33402","PortSpecifier":{"PortValue":33402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741056,"nanos":985988127},"http":{"id":"71ae45bc-e5ae-4b07-b205-4ca4e0714291","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:24:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71ae45bc-e5ae-4b07-b205-4ca4e0714291","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:24:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71ae45bc-e5ae-4b07-b205-4ca4e0714291","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:24:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71ae45bc-e5ae-4b07-b205-4ca4e0714291","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:24:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71ae45bc-e5ae-4b07-b205-4ca4e0714291","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:24:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71ae45bc-e5ae-4b07-b205-4ca4e0714291","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:24:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71ae45bc-e5ae-4b07-b205-4ca4e0714291","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/auth-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:24:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71ae45bc-e5ae-4b07-b205-4ca4e0714291","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:24:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71ae45bc-e5ae-4b07-b205-4ca4e0714291","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:24:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71ae45bc-e5ae-4b07-b205-4ca4e0714291","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:24:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71ae45bc-e5ae-4b07-b205-4ca4e0714291","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:24:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71ae45bc-e5ae-4b07-b205-4ca4e0714291","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfcc20de-5ebc-4fff-afbb-43a98c8bc23e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55618","PortSpecifier":{"PortValue":55618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bfcc20de-5ebc-4fff-afbb-43a98c8bc23e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfcc20de-5ebc-4fff-afbb-43a98c8bc23e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55618","PortSpecifier":{"PortValue":55618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741057,"nanos":22854281},"http":{"id":"bfcc20de-5ebc-4fff-afbb-43a98c8bc23e","method":"POST","headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bfcc20de-5ebc-4fff-afbb-43a98c8bc23e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bfcc20de-5ebc-4fff-afbb-43a98c8bc23e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bfcc20de-5ebc-4fff-afbb-43a98c8bc23e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfcc20de-5ebc-4fff-afbb-43a98c8bc23e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfcc20de-5ebc-4fff-afbb-43a98c8bc23e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfcc20de-5ebc-4fff-afbb-43a98c8bc23e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-05e61d/auth-test-model-05e61d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-05e61d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bfcc20de-5ebc-4fff-afbb-43a98c8bc23e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfcc20de-5ebc-4fff-afbb-43a98c8bc23e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfcc20de-5ebc-4fff-afbb-43a98c8bc23e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfcc20de-5ebc-4fff-afbb-43a98c8bc23e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfcc20de-5ebc-4fff-afbb-43a98c8bc23e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"408f0023-a08b-4b89-90e2-d715ac26d040","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33404","PortSpecifier":{"PortValue":33404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"408f0023-a08b-4b89-90e2-d715ac26d040","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"408f0023-a08b-4b89-90e2-d715ac26d040","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33404","PortSpecifier":{"PortValue":33404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741057,"nanos":61142494},"http":{"id":"408f0023-a08b-4b89-90e2-d715ac26d040","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"408f0023-a08b-4b89-90e2-d715ac26d040","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sywzuQd2dyAOV6OJ_Pz9mhEclW4xWpQvlPfeCcw071A3u82aedAGFv99G6ew"}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"408f0023-a08b-4b89-90e2-d715ac26d040","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sywzuQd2dyAOV6OJ_Pz9mhEclW4xWpQvlPfeCcw071A3u82aedAGFv99G6ew\"}"}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"408f0023-a08b-4b89-90e2-d715ac26d040","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"886ebbd0-5257-4756-99ff-481c15f655b7","keyName":"e2e-auth-iso-a-51896d","subscription":"e2e-auth-iso-044a6c","tenant":"e2e-shared-a-629c13","userId":"886ebbd0-5257-4756-99ff-481c15f655b7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"408f0023-a08b-4b89-90e2-d715ac26d040","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"408f0023-a08b-4b89-90e2-d715ac26d040","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"408f0023-a08b-4b89-90e2-d715ac26d040","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"408f0023-a08b-4b89-90e2-d715ac26d040","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/auth-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"408f0023-a08b-4b89-90e2-d715ac26d040","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"408f0023-a08b-4b89-90e2-d715ac26d040","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"408f0023-a08b-4b89-90e2-d715ac26d040","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-044a6c"}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"408f0023-a08b-4b89-90e2-d715ac26d040","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"408f0023-a08b-4b89-90e2-d715ac26d040","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:24:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"408f0023-a08b-4b89-90e2-d715ac26d040","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:24:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52cb9823fdde40870e48e6a8acc0b96f3547e9e42425511f38a69846403444f6"}
{"level":"info","ts":"2026-07-22T17:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a250c1567894b8a55e8a6b47936956429f808bed0caa79cb6392322e58f3289a"}
{"level":"info","ts":"2026-07-22T17:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"}
{"level":"info","ts":"2026-07-22T17:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4277cb3c012439246209d13f1e2c7c3b7b1895fe9e8e43082936d312b8a9dd5"}
{"level":"info","ts":"2026-07-22T17:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28c77fe1cb67502d3eb6cce90c96af4dece6379b8729812f2a66ee08926d5788"}
{"level":"info","ts":"2026-07-22T17:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7af722ab79303abd2619caacae554725482b714d6c6c8dc410c870b5d7dd7676"}
{"level":"info","ts":"2026-07-22T17:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/098fc4cd3f6089423b549da64d88b29f4d8804a9bc003259be7cdc2fc663ac96"}
{"level":"info","ts":"2026-07-22T17:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfbed923769f1b4ae2ac7c76be1cf61798ef01240e66d14c98649e9258236ea1"}
{"level":"info","ts":"2026-07-22T17:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5730d9fb538b66b2690d0b9ec6e8171154c3caa8f33f85cd6674e7964d4ffe2b"}
{"level":"info","ts":"2026-07-22T17:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cab70fa5ee6997bf175d05d9a576af9bea44e2015a25ae6abf6cd4538a3fe3b0"}
{"level":"info","ts":"2026-07-22T17:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d214bd9e4cedb4af076047bd01cc6c20403a1017ebd84949a802f7ee2be7796e"}
{"level":"info","ts":"2026-07-22T17:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/566fd2d821598cf9cc094205c8a041689431a314e17fd97a0a3f32a27bf5c0ca"}
{"level":"info","ts":"2026-07-22T17:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da9d596aab6122dbe97878d7c440aef4c4f0dbd2ae4b2808fad0f07098e8549e"}
{"level":"info","ts":"2026-07-22T17:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/710e6e10abebae89a13a9c91177945abb7cd3fd4831dc3022bfeeaa0150ca632"}
{"level":"info","ts":"2026-07-22T17:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/845dea7c09f7b453a2ca3e759d70fdfc812ba090d1d8445816a7b3b50e3481cc"}
{"level":"info","ts":"2026-07-22T17:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87f3d5a1113c22b9c75b16c7730889d67db363ee8af54127478695bafe861527"}
{"level":"info","ts":"2026-07-22T17:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e71a216a76694bfc715362b255432258ef17422b93477cb8d69ea22a7e8a316"}
{"level":"info","ts":"2026-07-22T17:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ea1c7813a7a60cd3828553851c9723d6513575c0c6058f5c9c10a2c3bf0d774"}
{"level":"info","ts":"2026-07-22T17:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1"}
{"level":"info","ts":"2026-07-22T17:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb"}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb"}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb"}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb"}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb"}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb"}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb"}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb"}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb"}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb"}
{"level":"info","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28"}
{"level":"error","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"error","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28"}
{"level":"error","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259"}
{"level":"error","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11"}
{"level":"error","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d44edce06b0f5e7ad7c82747b07ec953737e4f40eff981be5ed3042bddb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d44edce06b0f5e7ad7c82747b07ec953737e4f40eff981be5ed3042bddb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d44edce06b0f5e7ad7c82747b07ec953737e4f40eff981be5ed3042bddb490"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d44edce06b0f5e7ad7c82747b07ec953737e4f40eff981be5ed3042bddb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d44edce06b0f5e7ad7c82747b07ec953737e4f40eff981be5ed3042bddb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58d44edce06b0f5e7ad7c82747b07ec953737e4f40eff981be5ed3042bddb490","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d44edce06b0f5e7ad7c82747b07ec953737e4f40eff981be5ed3042bddb490"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d44edce06b0f5e7ad7c82747b07ec953737e4f40eff981be5ed3042bddb490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58d44edce06b0f5e7ad7c82747b07ec953737e4f40eff981be5ed3042bddb490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d44edce06b0f5e7ad7c82747b07ec953737e4f40eff981be5ed3042bddb490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58d44edce06b0f5e7ad7c82747b07ec953737e4f40eff981be5ed3042bddb490","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d44edce06b0f5e7ad7c82747b07ec953737e4f40eff981be5ed3042bddb490"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a20d03131ec6d4737869be435216c4189b0bae3e80b6862662e194f521e6c220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a20d03131ec6d4737869be435216c4189b0bae3e80b6862662e194f521e6c220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a20d03131ec6d4737869be435216c4189b0bae3e80b6862662e194f521e6c220"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a20d03131ec6d4737869be435216c4189b0bae3e80b6862662e194f521e6c220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a20d03131ec6d4737869be435216c4189b0bae3e80b6862662e194f521e6c220"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a20d03131ec6d4737869be435216c4189b0bae3e80b6862662e194f521e6c220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a20d03131ec6d4737869be435216c4189b0bae3e80b6862662e194f521e6c220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25"}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a20d03131ec6d4737869be435216c4189b0bae3e80b6862662e194f521e6c220"}
{"level":"info","ts":"2026-07-22T17:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25"}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01c9ddbe51e71d4d369eb7bce0600afce8aef2a302bce6b4d9c931cc3107acfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01c9ddbe51e71d4d369eb7bce0600afce8aef2a302bce6b4d9c931cc3107acfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01c9ddbe51e71d4d369eb7bce0600afce8aef2a302bce6b4d9c931cc3107acfa"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01c9ddbe51e71d4d369eb7bce0600afce8aef2a302bce6b4d9c931cc3107acfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01c9ddbe51e71d4d369eb7bce0600afce8aef2a302bce6b4d9c931cc3107acfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01c9ddbe51e71d4d369eb7bce0600afce8aef2a302bce6b4d9c931cc3107acfa"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01c9ddbe51e71d4d369eb7bce0600afce8aef2a302bce6b4d9c931cc3107acfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a05d7e183bf6833e632b19b662ad525dc3cb30611e39547a4d280ad4a22009f"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01c9ddbe51e71d4d369eb7bce0600afce8aef2a302bce6b4d9c931cc3107acfa"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a05d7e183bf6833e632b19b662ad525dc3cb30611e39547a4d280ad4a22009f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a05d7e183bf6833e632b19b662ad525dc3cb30611e39547a4d280ad4a22009f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185831d3c60fecc61c77acd891cb3795e30cc5a93ad5a07c68193b5e8b1b4caa"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a05d7e183bf6833e632b19b662ad525dc3cb30611e39547a4d280ad4a22009f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01c9ddbe51e71d4d369eb7bce0600afce8aef2a302bce6b4d9c931cc3107acfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4277cb3c012439246209d13f1e2c7c3b7b1895fe9e8e43082936d312b8a9dd5"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7701d91da894bd28a808e484d9efe6b9062f44bd53e4a9f5ebeed9b2b603b019"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"185831d3c60fecc61c77acd891cb3795e30cc5a93ad5a07c68193b5e8b1b4caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["185831d3c60fecc61c77acd891cb3795e30cc5a93ad5a07c68193b5e8b1b4caa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a05d7e183bf6833e632b19b662ad525dc3cb30611e39547a4d280ad4a22009f"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"185831d3c60fecc61c77acd891cb3795e30cc5a93ad5a07c68193b5e8b1b4caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4277cb3c012439246209d13f1e2c7c3b7b1895fe9e8e43082936d312b8a9dd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4277cb3c012439246209d13f1e2c7c3b7b1895fe9e8e43082936d312b8a9dd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6001c8e58f7e863573f9fc703dbe0de052668b1026841efe329b3a18cb356a5"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4277cb3c012439246209d13f1e2c7c3b7b1895fe9e8e43082936d312b8a9dd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/210b63da6e54b7cd69e5acbe55e6cc884519eac0d9303e47226b2c8565951259"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185831d3c60fecc61c77acd891cb3795e30cc5a93ad5a07c68193b5e8b1b4caa"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7701d91da894bd28a808e484d9efe6b9062f44bd53e4a9f5ebeed9b2b603b019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7701d91da894bd28a808e484d9efe6b9062f44bd53e4a9f5ebeed9b2b603b019"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2682c5c4513b6e55027e7fa07dcd895c570eaa018b43cabc1771b3ce63dc9cb7"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/584fb92faa0d4408c16b8766cc9bad93c302af6814d4b2dbbff02bc8df7095a2"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7701d91da894bd28a808e484d9efe6b9062f44bd53e4a9f5ebeed9b2b603b019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a05d7e183bf6833e632b19b662ad525dc3cb30611e39547a4d280ad4a22009f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4277cb3c012439246209d13f1e2c7c3b7b1895fe9e8e43082936d312b8a9dd5"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7701d91da894bd28a808e484d9efe6b9062f44bd53e4a9f5ebeed9b2b603b019"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6001c8e58f7e863573f9fc703dbe0de052668b1026841efe329b3a18cb356a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6001c8e58f7e863573f9fc703dbe0de052668b1026841efe329b3a18cb356a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6001c8e58f7e863573f9fc703dbe0de052668b1026841efe329b3a18cb356a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"210b63da6e54b7cd69e5acbe55e6cc884519eac0d9303e47226b2c8565951259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["210b63da6e54b7cd69e5acbe55e6cc884519eac0d9303e47226b2c8565951259"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6001c8e58f7e863573f9fc703dbe0de052668b1026841efe329b3a18cb356a5"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"210b63da6e54b7cd69e5acbe55e6cc884519eac0d9303e47226b2c8565951259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"185831d3c60fecc61c77acd891cb3795e30cc5a93ad5a07c68193b5e8b1b4caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2682c5c4513b6e55027e7fa07dcd895c570eaa018b43cabc1771b3ce63dc9cb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2682c5c4513b6e55027e7fa07dcd895c570eaa018b43cabc1771b3ce63dc9cb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/210b63da6e54b7cd69e5acbe55e6cc884519eac0d9303e47226b2c8565951259"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2682c5c4513b6e55027e7fa07dcd895c570eaa018b43cabc1771b3ce63dc9cb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"584fb92faa0d4408c16b8766cc9bad93c302af6814d4b2dbbff02bc8df7095a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["584fb92faa0d4408c16b8766cc9bad93c302af6814d4b2dbbff02bc8df7095a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2682c5c4513b6e55027e7fa07dcd895c570eaa018b43cabc1771b3ce63dc9cb7"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"584fb92faa0d4408c16b8766cc9bad93c302af6814d4b2dbbff02bc8df7095a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4277cb3c012439246209d13f1e2c7c3b7b1895fe9e8e43082936d312b8a9dd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7701d91da894bd28a808e484d9efe6b9062f44bd53e4a9f5ebeed9b2b603b019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6001c8e58f7e863573f9fc703dbe0de052668b1026841efe329b3a18cb356a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"210b63da6e54b7cd69e5acbe55e6cc884519eac0d9303e47226b2c8565951259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2682c5c4513b6e55027e7fa07dcd895c570eaa018b43cabc1771b3ce63dc9cb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"584fb92faa0d4408c16b8766cc9bad93c302af6814d4b2dbbff02bc8df7095a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/584fb92faa0d4408c16b8766cc9bad93c302af6814d4b2dbbff02bc8df7095a2"}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"584fb92faa0d4408c16b8766cc9bad93c302af6814d4b2dbbff02bc8df7095a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"584fb92faa0d4408c16b8766cc9bad93c302af6814d4b2dbbff02bc8df7095a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"584fb92faa0d4408c16b8766cc9bad93c302af6814d4b2dbbff02bc8df7095a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/584fb92faa0d4408c16b8766cc9bad93c302af6814d4b2dbbff02bc8df7095a2"}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"584fb92faa0d4408c16b8766cc9bad93c302af6814d4b2dbbff02bc8df7095a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:25:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["584fb92faa0d4408c16b8766cc9bad93c302af6814d4b2dbbff02bc8df7095a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"584fb92faa0d4408c16b8766cc9bad93c302af6814d4b2dbbff02bc8df7095a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"584fb92faa0d4408c16b8766cc9bad93c302af6814d4b2dbbff02bc8df7095a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:25:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/584fb92faa0d4408c16b8766cc9bad93c302af6814d4b2dbbff02bc8df7095a2"}
{"level":"info","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"158cad12-57de-4dd2-adf9-9673b8fe2e75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40316","PortSpecifier":{"PortValue":40316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"158cad12-57de-4dd2-adf9-9673b8fe2e75","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"158cad12-57de-4dd2-adf9-9673b8fe2e75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40316","PortSpecifier":{"PortValue":40316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741110,"nanos":894962225},"http":{"id":"158cad12-57de-4dd2-adf9-9673b8fe2e75","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"158cad12-57de-4dd2-adf9-9673b8fe2e75","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"158cad12-57de-4dd2-adf9-9673b8fe2e75","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"158cad12-57de-4dd2-adf9-9673b8fe2e75","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"158cad12-57de-4dd2-adf9-9673b8fe2e75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"158cad12-57de-4dd2-adf9-9673b8fe2e75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"158cad12-57de-4dd2-adf9-9673b8fe2e75","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/sub-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"158cad12-57de-4dd2-adf9-9673b8fe2e75","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"158cad12-57de-4dd2-adf9-9673b8fe2e75","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"158cad12-57de-4dd2-adf9-9673b8fe2e75","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"158cad12-57de-4dd2-adf9-9673b8fe2e75","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"158cad12-57de-4dd2-adf9-9673b8fe2e75","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c20eed71-f5a4-4551-ba0e-a3d8c5c6f37f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46528","PortSpecifier":{"PortValue":46528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c20eed71-f5a4-4551-ba0e-a3d8c5c6f37f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c20eed71-f5a4-4551-ba0e-a3d8c5c6f37f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46528","PortSpecifier":{"PortValue":46528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741110,"nanos":929016083},"http":{"id":"c20eed71-f5a4-4551-ba0e-a3d8c5c6f37f","method":"POST","headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c20eed71-f5a4-4551-ba0e-a3d8c5c6f37f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c20eed71-f5a4-4551-ba0e-a3d8c5c6f37f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c20eed71-f5a4-4551-ba0e-a3d8c5c6f37f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c20eed71-f5a4-4551-ba0e-a3d8c5c6f37f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c20eed71-f5a4-4551-ba0e-a3d8c5c6f37f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c20eed71-f5a4-4551-ba0e-a3d8c5c6f37f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-05e61d/sub-test-model-05e61d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-05e61d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c20eed71-f5a4-4551-ba0e-a3d8c5c6f37f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c20eed71-f5a4-4551-ba0e-a3d8c5c6f37f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c20eed71-f5a4-4551-ba0e-a3d8c5c6f37f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c20eed71-f5a4-4551-ba0e-a3d8c5c6f37f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c20eed71-f5a4-4551-ba0e-a3d8c5c6f37f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e221027f-1c4d-482e-86a6-9974ddf85dec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40320","PortSpecifier":{"PortValue":40320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e221027f-1c4d-482e-86a6-9974ddf85dec","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e221027f-1c4d-482e-86a6-9974ddf85dec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40320","PortSpecifier":{"PortValue":40320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741110,"nanos":961705821},"http":{"id":"e221027f-1c4d-482e-86a6-9974ddf85dec","method":"GET","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e221027f-1c4d-482e-86a6-9974ddf85dec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1e0pvgLh6HEYIyExM_9idDkedUEyaNSpXz49rYdRh8xovslyiYvG6BUxGdcGd"}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e221027f-1c4d-482e-86a6-9974ddf85dec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1e0pvgLh6HEYIyExM_9idDkedUEyaNSpXz49rYdRh8xovslyiYvG6BUxGdcGd\"}"}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e221027f-1c4d-482e-86a6-9974ddf85dec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2527dd51-8ea3-41c6-8842-3a54b48ee3ca","keyName":"e2e-sub-iso-6086a1","subscription":"e2e-a-only-41dc24","tenant":"e2e-shared-a-629c13","userId":"2527dd51-8ea3-41c6-8842-3a54b48ee3ca","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e221027f-1c4d-482e-86a6-9974ddf85dec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e221027f-1c4d-482e-86a6-9974ddf85dec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e221027f-1c4d-482e-86a6-9974ddf85dec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e221027f-1c4d-482e-86a6-9974ddf85dec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/sub-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e221027f-1c4d-482e-86a6-9974ddf85dec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e221027f-1c4d-482e-86a6-9974ddf85dec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e221027f-1c4d-482e-86a6-9974ddf85dec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-41dc24"}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e221027f-1c4d-482e-86a6-9974ddf85dec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e221027f-1c4d-482e-86a6-9974ddf85dec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e221027f-1c4d-482e-86a6-9974ddf85dec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a2efb8d-139e-4909-a1c2-0f4641667973","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46542","PortSpecifier":{"PortValue":46542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a2efb8d-139e-4909-a1c2-0f4641667973","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a2efb8d-139e-4909-a1c2-0f4641667973","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46542","PortSpecifier":{"PortValue":46542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741110,"nanos":990587895},"http":{"id":"9a2efb8d-139e-4909-a1c2-0f4641667973","method":"GET","headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a2efb8d-139e-4909-a1c2-0f4641667973","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gWLi0YcKrItOTTgi_VzpABFWzFVUgZENiDhvJcy0blbszxgYoQeW2HbpVzQe"}
{"level":"debug","ts":"2026-07-22T17:25:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a2efb8d-139e-4909-a1c2-0f4641667973","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-05e61d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gWLi0YcKrItOTTgi_VzpABFWzFVUgZENiDhvJcy0blbszxgYoQeW2HbpVzQe\"}"}
{"level":"debug","ts":"2026-07-22T17:25:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a2efb8d-139e-4909-a1c2-0f4641667973","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-05e61d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72c5eedd-c4a3-4ee6-a32a-eb5f711653b7","keyName":"e2e-sub-iso-966146","subscription":"e2e-b-only-41dc24","tenant":"e2e-shared-b-05e61d","userId":"72c5eedd-c4a3-4ee6-a32a-eb5f711653b7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a2efb8d-139e-4909-a1c2-0f4641667973","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a2efb8d-139e-4909-a1c2-0f4641667973","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a2efb8d-139e-4909-a1c2-0f4641667973","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a2efb8d-139e-4909-a1c2-0f4641667973","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-05e61d/sub-test-model-05e61d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-05e61d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a2efb8d-139e-4909-a1c2-0f4641667973","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T17:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a2efb8d-139e-4909-a1c2-0f4641667973","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a2efb8d-139e-4909-a1c2-0f4641667973","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-41dc24"}
{"level":"debug","ts":"2026-07-22T17:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a2efb8d-139e-4909-a1c2-0f4641667973","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:25:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a2efb8d-139e-4909-a1c2-0f4641667973","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:25:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a2efb8d-139e-4909-a1c2-0f4641667973","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c25086c-fa84-4057-9ed4-a92913977476","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41756","PortSpecifier":{"PortValue":41756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c25086c-fa84-4057-9ed4-a92913977476","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c25086c-fa84-4057-9ed4-a92913977476","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41756","PortSpecifier":{"PortValue":41756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741123,"nanos":54884551},"http":{"id":"2c25086c-fa84-4057-9ed4-a92913977476","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c25086c-fa84-4057-9ed4-a92913977476","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c25086c-fa84-4057-9ed4-a92913977476","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c25086c-fa84-4057-9ed4-a92913977476","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c25086c-fa84-4057-9ed4-a92913977476","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c25086c-fa84-4057-9ed4-a92913977476","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c25086c-fa84-4057-9ed4-a92913977476","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/sub-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c25086c-fa84-4057-9ed4-a92913977476","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c25086c-fa84-4057-9ed4-a92913977476","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c25086c-fa84-4057-9ed4-a92913977476","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c25086c-fa84-4057-9ed4-a92913977476","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c25086c-fa84-4057-9ed4-a92913977476","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6692b40-d4fc-4a10-aae8-361783d61e58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60410","PortSpecifier":{"PortValue":60410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6692b40-d4fc-4a10-aae8-361783d61e58","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6692b40-d4fc-4a10-aae8-361783d61e58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60410","PortSpecifier":{"PortValue":60410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741123,"nanos":90831557},"http":{"id":"e6692b40-d4fc-4a10-aae8-361783d61e58","method":"POST","headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e6692b40-d4fc-4a10-aae8-361783d61e58","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6692b40-d4fc-4a10-aae8-361783d61e58","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6692b40-d4fc-4a10-aae8-361783d61e58","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6692b40-d4fc-4a10-aae8-361783d61e58","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6692b40-d4fc-4a10-aae8-361783d61e58","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6692b40-d4fc-4a10-aae8-361783d61e58","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-05e61d/sub-test-model-05e61d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-05e61d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e6692b40-d4fc-4a10-aae8-361783d61e58","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6692b40-d4fc-4a10-aae8-361783d61e58","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6692b40-d4fc-4a10-aae8-361783d61e58","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6692b40-d4fc-4a10-aae8-361783d61e58","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6692b40-d4fc-4a10-aae8-361783d61e58","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52dd87b9-0919-4334-9091-67d0c7dc138a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41764","PortSpecifier":{"PortValue":41764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52dd87b9-0919-4334-9091-67d0c7dc138a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52dd87b9-0919-4334-9091-67d0c7dc138a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41764","PortSpecifier":{"PortValue":41764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741123,"nanos":122349745},"http":{"id":"52dd87b9-0919-4334-9091-67d0c7dc138a","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52dd87b9-0919-4334-9091-67d0c7dc138a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11KoED1od4eHpsVC5_DargdSc8xQ8cy9NTbTr3fjnWC6VfLKYLcM4Qy6xrWt1"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52dd87b9-0919-4334-9091-67d0c7dc138a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11KoED1od4eHpsVC5_DargdSc8xQ8cy9NTbTr3fjnWC6VfLKYLcM4Qy6xrWt1\"}"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52dd87b9-0919-4334-9091-67d0c7dc138a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"81d52a6e-f4d0-4d23-a0aa-f4a57573a47e","keyName":"e2e-sub-iso-60b11d","subscription":"e2e-shared-sub-dbacd9","tenant":"e2e-shared-a-629c13","userId":"81d52a6e-f4d0-4d23-a0aa-f4a57573a47e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52dd87b9-0919-4334-9091-67d0c7dc138a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52dd87b9-0919-4334-9091-67d0c7dc138a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52dd87b9-0919-4334-9091-67d0c7dc138a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52dd87b9-0919-4334-9091-67d0c7dc138a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/sub-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52dd87b9-0919-4334-9091-67d0c7dc138a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52dd87b9-0919-4334-9091-67d0c7dc138a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52dd87b9-0919-4334-9091-67d0c7dc138a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-dbacd9"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52dd87b9-0919-4334-9091-67d0c7dc138a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52dd87b9-0919-4334-9091-67d0c7dc138a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52dd87b9-0919-4334-9091-67d0c7dc138a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3ad4d50-ca6c-40ce-897b-3922ffa9cfad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60418","PortSpecifier":{"PortValue":60418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3ad4d50-ca6c-40ce-897b-3922ffa9cfad","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3ad4d50-ca6c-40ce-897b-3922ffa9cfad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60418","PortSpecifier":{"PortValue":60418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741123,"nanos":147307877},"http":{"id":"c3ad4d50-ca6c-40ce-897b-3922ffa9cfad","method":"POST","headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3ad4d50-ca6c-40ce-897b-3922ffa9cfad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ySrDFK08x9f7GXVQ_pXY6Q1ma1JkqQpJBigth3g2jynXtlh8YR6BRWdqbEyY"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3ad4d50-ca6c-40ce-897b-3922ffa9cfad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-05e61d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ySrDFK08x9f7GXVQ_pXY6Q1ma1JkqQpJBigth3g2jynXtlh8YR6BRWdqbEyY\"}"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3ad4d50-ca6c-40ce-897b-3922ffa9cfad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-05e61d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ff51f669-9c4a-41d8-aa20-6a211b8d9ea0","keyName":"e2e-sub-iso-f3c382","subscription":"e2e-shared-sub-dbacd9","tenant":"e2e-shared-b-05e61d","userId":"ff51f669-9c4a-41d8-aa20-6a211b8d9ea0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3ad4d50-ca6c-40ce-897b-3922ffa9cfad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3ad4d50-ca6c-40ce-897b-3922ffa9cfad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3ad4d50-ca6c-40ce-897b-3922ffa9cfad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3ad4d50-ca6c-40ce-897b-3922ffa9cfad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-05e61d/sub-test-model-05e61d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-05e61d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3ad4d50-ca6c-40ce-897b-3922ffa9cfad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3ad4d50-ca6c-40ce-897b-3922ffa9cfad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3ad4d50-ca6c-40ce-897b-3922ffa9cfad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3ad4d50-ca6c-40ce-897b-3922ffa9cfad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-dbacd9"}
{"level":"info","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3ad4d50-ca6c-40ce-897b-3922ffa9cfad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:25:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3ad4d50-ca6c-40ce-897b-3922ffa9cfad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a05d7e183bf6833e632b19b662ad525dc3cb30611e39547a4d280ad4a22009f"}
{"level":"info","ts":"2026-07-22T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06c7702aecb9ba19869bbec53be1a9fb2798c5bda0ab269e0575867192923fcb"}
{"level":"info","ts":"2026-07-22T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2682c5c4513b6e55027e7fa07dcd895c570eaa018b43cabc1771b3ce63dc9cb7"}
{"level":"info","ts":"2026-07-22T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5586c96e63e8cba1e5589609b389f7e919cd5ebdb79705743cbbdd1bfabf6e28"}
{"level":"info","ts":"2026-07-22T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1"}
{"level":"info","ts":"2026-07-22T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01c9ddbe51e71d4d369eb7bce0600afce8aef2a302bce6b4d9c931cc3107acfa"}
{"level":"info","ts":"2026-07-22T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58d44edce06b0f5e7ad7c82747b07ec953737e4f40eff981be5ed3042bddb490"}
{"level":"info","ts":"2026-07-22T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aff8a54932783dddeb9cc8add270c5d2aab19a5527262db4f879f3659b43a49"}
{"level":"info","ts":"2026-07-22T17:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/185831d3c60fecc61c77acd891cb3795e30cc5a93ad5a07c68193b5e8b1b4caa"}
{"level":"info","ts":"2026-07-22T17:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09467944236557daa999bfa2e623d42d6703c5dba6e3c9f7bd26e1435b180c11"}
{"level":"info","ts":"2026-07-22T17:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"}
{"level":"info","ts":"2026-07-22T17:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78c9073328c05c45cdeac74aa49122131c64caa8af48eed68eae3758cc242f25"}
{"level":"info","ts":"2026-07-22T17:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4277cb3c012439246209d13f1e2c7c3b7b1895fe9e8e43082936d312b8a9dd5"}
{"level":"info","ts":"2026-07-22T17:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a20d03131ec6d4737869be435216c4189b0bae3e80b6862662e194f521e6c220"}
{"level":"info","ts":"2026-07-22T17:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6001c8e58f7e863573f9fc703dbe0de052668b1026841efe329b3a18cb356a5"}
{"level":"info","ts":"2026-07-22T17:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7701d91da894bd28a808e484d9efe6b9062f44bd53e4a9f5ebeed9b2b603b019"}
{"level":"info","ts":"2026-07-22T17:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/584fb92faa0d4408c16b8766cc9bad93c302af6814d4b2dbbff02bc8df7095a2"}
{"level":"info","ts":"2026-07-22T17:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"}
{"level":"info","ts":"2026-07-22T17:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0198a50cc480671b4536fb90c96c80e8a8bad5e7c856d60b739d453e6963f259"}
{"level":"info","ts":"2026-07-22T17:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/210b63da6e54b7cd69e5acbe55e6cc884519eac0d9303e47226b2c8565951259"}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e"}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e"}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e"}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e"}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e"}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff94f24d2297b528201790dfd01b64694d1357f66ba3bbb0eb4d6d6af2bf9a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f"}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff94f24d2297b528201790dfd01b64694d1357f66ba3bbb0eb4d6d6af2bf9a9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff94f24d2297b528201790dfd01b64694d1357f66ba3bbb0eb4d6d6af2bf9a9a"}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff94f24d2297b528201790dfd01b64694d1357f66ba3bbb0eb4d6d6af2bf9a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff94f24d2297b528201790dfd01b64694d1357f66ba3bbb0eb4d6d6af2bf9a9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e"}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff94f24d2297b528201790dfd01b64694d1357f66ba3bbb0eb4d6d6af2bf9a9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff94f24d2297b528201790dfd01b64694d1357f66ba3bbb0eb4d6d6af2bf9a9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f"}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff94f24d2297b528201790dfd01b64694d1357f66ba3bbb0eb4d6d6af2bf9a9a"}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f"}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef"}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f"}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef"}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5441ce8b776d61f060a71bfd793fbbd636dd2a4c52de0b4f5a9902511e4593f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f"}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5441ce8b776d61f060a71bfd793fbbd636dd2a4c52de0b4f5a9902511e4593f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5441ce8b776d61f060a71bfd793fbbd636dd2a4c52de0b4f5a9902511e4593f5"}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5441ce8b776d61f060a71bfd793fbbd636dd2a4c52de0b4f5a9902511e4593f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5441ce8b776d61f060a71bfd793fbbd636dd2a4c52de0b4f5a9902511e4593f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef"}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5441ce8b776d61f060a71bfd793fbbd636dd2a4c52de0b4f5a9902511e4593f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5441ce8b776d61f060a71bfd793fbbd636dd2a4c52de0b4f5a9902511e4593f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5441ce8b776d61f060a71bfd793fbbd636dd2a4c52de0b4f5a9902511e4593f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5441ce8b776d61f060a71bfd793fbbd636dd2a4c52de0b4f5a9902511e4593f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5441ce8b776d61f060a71bfd793fbbd636dd2a4c52de0b4f5a9902511e4593f5"}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5441ce8b776d61f060a71bfd793fbbd636dd2a4c52de0b4f5a9902511e4593f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5441ce8b776d61f060a71bfd793fbbd636dd2a4c52de0b4f5a9902511e4593f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5441ce8b776d61f060a71bfd793fbbd636dd2a4c52de0b4f5a9902511e4593f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5441ce8b776d61f060a71bfd793fbbd636dd2a4c52de0b4f5a9902511e4593f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f"}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5441ce8b776d61f060a71bfd793fbbd636dd2a4c52de0b4f5a9902511e4593f5"}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228"}
{"level":"info","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228"}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d"}
{"level":"error","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02989cb6bfab03e2d16bc2c25f3db3971f53eb30bb3e17a2cb622346b38a0e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02989cb6bfab03e2d16bc2c25f3db3971f53eb30bb3e17a2cb622346b38a0e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02989cb6bfab03e2d16bc2c25f3db3971f53eb30bb3e17a2cb622346b38a0e6d"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02989cb6bfab03e2d16bc2c25f3db3971f53eb30bb3e17a2cb622346b38a0e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02989cb6bfab03e2d16bc2c25f3db3971f53eb30bb3e17a2cb622346b38a0e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02989cb6bfab03e2d16bc2c25f3db3971f53eb30bb3e17a2cb622346b38a0e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02989cb6bfab03e2d16bc2c25f3db3971f53eb30bb3e17a2cb622346b38a0e6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02989cb6bfab03e2d16bc2c25f3db3971f53eb30bb3e17a2cb622346b38a0e6d"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f1f64a35082b2b320cad8666fb6251d1faad910064c24adf234709c64971e44"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f1f64a35082b2b320cad8666fb6251d1faad910064c24adf234709c64971e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f1f64a35082b2b320cad8666fb6251d1faad910064c24adf234709c64971e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f1f64a35082b2b320cad8666fb6251d1faad910064c24adf234709c64971e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f1f64a35082b2b320cad8666fb6251d1faad910064c24adf234709c64971e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f1f64a35082b2b320cad8666fb6251d1faad910064c24adf234709c64971e44"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f1f64a35082b2b320cad8666fb6251d1faad910064c24adf234709c64971e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f1f64a35082b2b320cad8666fb6251d1faad910064c24adf234709c64971e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f1f64a35082b2b320cad8666fb6251d1faad910064c24adf234709c64971e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f1f64a35082b2b320cad8666fb6251d1faad910064c24adf234709c64971e44"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f1f64a35082b2b320cad8666fb6251d1faad910064c24adf234709c64971e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f1f64a35082b2b320cad8666fb6251d1faad910064c24adf234709c64971e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f1f64a35082b2b320cad8666fb6251d1faad910064c24adf234709c64971e44"}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38cc7bb4ec32ee2a272f7b8cda12bcfdfe6427bab74849e13c0c69b00c2ae07c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38cc7bb4ec32ee2a272f7b8cda12bcfdfe6427bab74849e13c0c69b00c2ae07c"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38cc7bb4ec32ee2a272f7b8cda12bcfdfe6427bab74849e13c0c69b00c2ae07c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f856159b77c5d7f9e5850139c3318ab1a0ea553f5aab80bed19150fff49fbd43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f856159b77c5d7f9e5850139c3318ab1a0ea553f5aab80bed19150fff49fbd43"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f856159b77c5d7f9e5850139c3318ab1a0ea553f5aab80bed19150fff49fbd43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38cc7bb4ec32ee2a272f7b8cda12bcfdfe6427bab74849e13c0c69b00c2ae07c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38cc7bb4ec32ee2a272f7b8cda12bcfdfe6427bab74849e13c0c69b00c2ae07c"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38cc7bb4ec32ee2a272f7b8cda12bcfdfe6427bab74849e13c0c69b00c2ae07c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1233182ba9425ebbb6a753f73e2b2c6f127726fe817ecdd005590c45fec4dbb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1233182ba9425ebbb6a753f73e2b2c6f127726fe817ecdd005590c45fec4dbb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f856159b77c5d7f9e5850139c3318ab1a0ea553f5aab80bed19150fff49fbd43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f856159b77c5d7f9e5850139c3318ab1a0ea553f5aab80bed19150fff49fbd43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1233182ba9425ebbb6a753f73e2b2c6f127726fe817ecdd005590c45fec4dbb0"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f856159b77c5d7f9e5850139c3318ab1a0ea553f5aab80bed19150fff49fbd43"}
{"level":"info","ts":"2026-07-22T17:26:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f856159b77c5d7f9e5850139c3318ab1a0ea553f5aab80bed19150fff49fbd43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38cc7bb4ec32ee2a272f7b8cda12bcfdfe6427bab74849e13c0c69b00c2ae07c"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4277cb3c012439246209d13f1e2c7c3b7b1895fe9e8e43082936d312b8a9dd5"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1233182ba9425ebbb6a753f73e2b2c6f127726fe817ecdd005590c45fec4dbb0"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38cc7bb4ec32ee2a272f7b8cda12bcfdfe6427bab74849e13c0c69b00c2ae07c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38cc7bb4ec32ee2a272f7b8cda12bcfdfe6427bab74849e13c0c69b00c2ae07c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38cc7bb4ec32ee2a272f7b8cda12bcfdfe6427bab74849e13c0c69b00c2ae07c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4277cb3c012439246209d13f1e2c7c3b7b1895fe9e8e43082936d312b8a9dd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4277cb3c012439246209d13f1e2c7c3b7b1895fe9e8e43082936d312b8a9dd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e517b6f4c3c8295736c21bd680488281d4c1c81bd9fb359233c7f359d5ae339e"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f856159b77c5d7f9e5850139c3318ab1a0ea553f5aab80bed19150fff49fbd43"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8f654f7c47bf8202d2abf2cd3410112dda780578634576046d0ccb2d37cef2b"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4277cb3c012439246209d13f1e2c7c3b7b1895fe9e8e43082936d312b8a9dd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1233182ba9425ebbb6a753f73e2b2c6f127726fe817ecdd005590c45fec4dbb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1233182ba9425ebbb6a753f73e2b2c6f127726fe817ecdd005590c45fec4dbb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b462ac4037a2598d1def2995014f2a00e50bc61854b0a765a9cf3805e85d05ad"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1233182ba9425ebbb6a753f73e2b2c6f127726fe817ecdd005590c45fec4dbb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48728c384f26129be68abc4ba7e89e701b04343aa6a9d605967a3028d4da5485"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38cc7bb4ec32ee2a272f7b8cda12bcfdfe6427bab74849e13c0c69b00c2ae07c"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4277cb3c012439246209d13f1e2c7c3b7b1895fe9e8e43082936d312b8a9dd5"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e517b6f4c3c8295736c21bd680488281d4c1c81bd9fb359233c7f359d5ae339e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e517b6f4c3c8295736c21bd680488281d4c1c81bd9fb359233c7f359d5ae339e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1233182ba9425ebbb6a753f73e2b2c6f127726fe817ecdd005590c45fec4dbb0"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e517b6f4c3c8295736c21bd680488281d4c1c81bd9fb359233c7f359d5ae339e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f856159b77c5d7f9e5850139c3318ab1a0ea553f5aab80bed19150fff49fbd43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8f654f7c47bf8202d2abf2cd3410112dda780578634576046d0ccb2d37cef2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8f654f7c47bf8202d2abf2cd3410112dda780578634576046d0ccb2d37cef2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e517b6f4c3c8295736c21bd680488281d4c1c81bd9fb359233c7f359d5ae339e"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8f654f7c47bf8202d2abf2cd3410112dda780578634576046d0ccb2d37cef2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b462ac4037a2598d1def2995014f2a00e50bc61854b0a765a9cf3805e85d05ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b462ac4037a2598d1def2995014f2a00e50bc61854b0a765a9cf3805e85d05ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b462ac4037a2598d1def2995014f2a00e50bc61854b0a765a9cf3805e85d05ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8f654f7c47bf8202d2abf2cd3410112dda780578634576046d0ccb2d37cef2b"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b462ac4037a2598d1def2995014f2a00e50bc61854b0a765a9cf3805e85d05ad"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48728c384f26129be68abc4ba7e89e701b04343aa6a9d605967a3028d4da5485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48728c384f26129be68abc4ba7e89e701b04343aa6a9d605967a3028d4da5485"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48728c384f26129be68abc4ba7e89e701b04343aa6a9d605967a3028d4da5485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48728c384f26129be68abc4ba7e89e701b04343aa6a9d605967a3028d4da5485"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38cc7bb4ec32ee2a272f7b8cda12bcfdfe6427bab74849e13c0c69b00c2ae07c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4277cb3c012439246209d13f1e2c7c3b7b1895fe9e8e43082936d312b8a9dd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1233182ba9425ebbb6a753f73e2b2c6f127726fe817ecdd005590c45fec4dbb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e517b6f4c3c8295736c21bd680488281d4c1c81bd9fb359233c7f359d5ae339e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8f654f7c47bf8202d2abf2cd3410112dda780578634576046d0ccb2d37cef2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b462ac4037a2598d1def2995014f2a00e50bc61854b0a765a9cf3805e85d05ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48728c384f26129be68abc4ba7e89e701b04343aa6a9d605967a3028d4da5485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T17:26:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"}
{"level":"error","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T17:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48d2d01f-ae40-468a-a01c-29324f9cd2a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35130","PortSpecifier":{"PortValue":35130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48d2d01f-ae40-468a-a01c-29324f9cd2a7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48d2d01f-ae40-468a-a01c-29324f9cd2a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35130","PortSpecifier":{"PortValue":35130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741202,"nanos":439972188},"http":{"id":"48d2d01f-ae40-468a-a01c-29324f9cd2a7","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"48d2d01f-ae40-468a-a01c-29324f9cd2a7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48d2d01f-ae40-468a-a01c-29324f9cd2a7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48d2d01f-ae40-468a-a01c-29324f9cd2a7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48d2d01f-ae40-468a-a01c-29324f9cd2a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48d2d01f-ae40-468a-a01c-29324f9cd2a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48d2d01f-ae40-468a-a01c-29324f9cd2a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48d2d01f-ae40-468a-a01c-29324f9cd2a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48d2d01f-ae40-468a-a01c-29324f9cd2a7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48d2d01f-ae40-468a-a01c-29324f9cd2a7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48d2d01f-ae40-468a-a01c-29324f9cd2a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48d2d01f-ae40-468a-a01c-29324f9cd2a7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4c49099-ca66-4325-a584-5acc0df02ffc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36064","PortSpecifier":{"PortValue":36064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4c49099-ca66-4325-a584-5acc0df02ffc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4c49099-ca66-4325-a584-5acc0df02ffc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36064","PortSpecifier":{"PortValue":36064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741202,"nanos":477031868},"http":{"id":"c4c49099-ca66-4325-a584-5acc0df02ffc","method":"POST","headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4c49099-ca66-4325-a584-5acc0df02ffc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4c49099-ca66-4325-a584-5acc0df02ffc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4c49099-ca66-4325-a584-5acc0df02ffc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4c49099-ca66-4325-a584-5acc0df02ffc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4c49099-ca66-4325-a584-5acc0df02ffc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4c49099-ca66-4325-a584-5acc0df02ffc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-05e61d/rate-test-model-05e61d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-05e61d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4c49099-ca66-4325-a584-5acc0df02ffc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4c49099-ca66-4325-a584-5acc0df02ffc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4c49099-ca66-4325-a584-5acc0df02ffc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4c49099-ca66-4325-a584-5acc0df02ffc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4c49099-ca66-4325-a584-5acc0df02ffc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35134","PortSpecifier":{"PortValue":35134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","method":"POST","path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35134","PortSpecifier":{"PortValue":35134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741202,"nanos":519987324},"http":{"id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UoTTQIY6oQ57WhQu_VfmhvwNS1Fa3ZJXZc60qeOOYYP4vDQZ8nOhi6PqtbYO"}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UoTTQIY6oQ57WhQu_VfmhvwNS1Fa3ZJXZc60qeOOYYP4vDQZ8nOhi6PqtbYO\"}"}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d98a066f-bd58-4860-b763-2766304431f8","keyName":"e2e-rate-a-348701","subscription":"e2e-rate-iso-a-348701","tenant":"e2e-shared-a-629c13","userId":"d98a066f-bd58-4860-b763-2766304431f8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\",\"requestedSubscription\":\"e2e-rate-iso-a-348701\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-348701","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-348701"}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d98a066f-bd58-4860-b763-2766304431f8","keyName":"e2e-rate-a-348701","selected_subscription":"e2e-rate-iso-a-348701","selected_subscription_key":"ai-tenant-e2e-shared-a-629c13/e2e-rate-iso-a-348701@ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-348701","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:26:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"439c375c-8b99-4b0d-8d14-f1e17555c98f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41932","PortSpecifier":{"PortValue":41932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21c109a5-797a-4c0b-a929-7a69c821357e","method":"POST","path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41932","PortSpecifier":{"PortValue":41932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741203,"nanos":584115298},"http":{"id":"21c109a5-797a-4c0b-a929-7a69c821357e","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UoTTQIY6oQ57WhQu_VfmhvwNS1Fa3ZJXZc60qeOOYYP4vDQZ8nOhi6PqtbYO"}
{"level":"debug","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UoTTQIY6oQ57WhQu_VfmhvwNS1Fa3ZJXZc60qeOOYYP4vDQZ8nOhi6PqtbYO\"}"}
{"level":"debug","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d98a066f-bd58-4860-b763-2766304431f8","keyName":"e2e-rate-a-348701","subscription":"e2e-rate-iso-a-348701","tenant":"e2e-shared-a-629c13","userId":"d98a066f-bd58-4860-b763-2766304431f8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\",\"requestedSubscription\":\"e2e-rate-iso-a-348701\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-348701","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"}}
{"level":"debug","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-348701"}
{"level":"debug","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d98a066f-bd58-4860-b763-2766304431f8","keyName":"e2e-rate-a-348701","selected_subscription":"e2e-rate-iso-a-348701","selected_subscription_key":"ai-tenant-e2e-shared-a-629c13/e2e-rate-iso-a-348701@ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-348701","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:26:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21c109a5-797a-4c0b-a929-7a69c821357e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41946","PortSpecifier":{"PortValue":41946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","method":"POST","path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41946","PortSpecifier":{"PortValue":41946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741204,"nanos":628559170},"http":{"id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UoTTQIY6oQ57WhQu_VfmhvwNS1Fa3ZJXZc60qeOOYYP4vDQZ8nOhi6PqtbYO"}
{"level":"debug","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UoTTQIY6oQ57WhQu_VfmhvwNS1Fa3ZJXZc60qeOOYYP4vDQZ8nOhi6PqtbYO\"}"}
{"level":"debug","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d98a066f-bd58-4860-b763-2766304431f8","keyName":"e2e-rate-a-348701","subscription":"e2e-rate-iso-a-348701","tenant":"e2e-shared-a-629c13","userId":"d98a066f-bd58-4860-b763-2766304431f8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\",\"requestedSubscription\":\"e2e-rate-iso-a-348701\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-348701","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"}}
{"level":"debug","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-348701"}
{"level":"debug","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d98a066f-bd58-4860-b763-2766304431f8","keyName":"e2e-rate-a-348701","selected_subscription":"e2e-rate-iso-a-348701","selected_subscription_key":"ai-tenant-e2e-shared-a-629c13/e2e-rate-iso-a-348701@ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-348701","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:26:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30b0e2b6-d5b7-456e-be1b-1e6928a3c974","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c1af424-32d8-4b2f-ae70-1c8a80bcc0a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54252","PortSpecifier":{"PortValue":54252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c1af424-32d8-4b2f-ae70-1c8a80bcc0a2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c1af424-32d8-4b2f-ae70-1c8a80bcc0a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54252","PortSpecifier":{"PortValue":54252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741213,"nanos":362305528},"http":{"id":"0c1af424-32d8-4b2f-ae70-1c8a80bcc0a2","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c1af424-32d8-4b2f-ae70-1c8a80bcc0a2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c1af424-32d8-4b2f-ae70-1c8a80bcc0a2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c1af424-32d8-4b2f-ae70-1c8a80bcc0a2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c1af424-32d8-4b2f-ae70-1c8a80bcc0a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c1af424-32d8-4b2f-ae70-1c8a80bcc0a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c1af424-32d8-4b2f-ae70-1c8a80bcc0a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c1af424-32d8-4b2f-ae70-1c8a80bcc0a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c1af424-32d8-4b2f-ae70-1c8a80bcc0a2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c1af424-32d8-4b2f-ae70-1c8a80bcc0a2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c1af424-32d8-4b2f-ae70-1c8a80bcc0a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c1af424-32d8-4b2f-ae70-1c8a80bcc0a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b30eb348-ecd4-46f2-a671-7a4cfd499b34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52234","PortSpecifier":{"PortValue":52234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b30eb348-ecd4-46f2-a671-7a4cfd499b34","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b30eb348-ecd4-46f2-a671-7a4cfd499b34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52234","PortSpecifier":{"PortValue":52234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741213,"nanos":396788373},"http":{"id":"b30eb348-ecd4-46f2-a671-7a4cfd499b34","method":"POST","headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b30eb348-ecd4-46f2-a671-7a4cfd499b34","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b30eb348-ecd4-46f2-a671-7a4cfd499b34","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aa191b50-9a71-45b6-a80c-f687774087cc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"]}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b30eb348-ecd4-46f2-a671-7a4cfd499b34","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3bc22f15a725"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a27bbe23-d2d6-4d77-b29f-f8c1d4661fd2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aa191b50-9a71-45b6-a80c-f687774087cc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b30eb348-ecd4-46f2-a671-7a4cfd499b34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b30eb348-ecd4-46f2-a671-7a4cfd499b34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b30eb348-ecd4-46f2-a671-7a4cfd499b34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-05e61d/rate-test-model-05e61d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-05e61d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b30eb348-ecd4-46f2-a671-7a4cfd499b34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b30eb348-ecd4-46f2-a671-7a4cfd499b34","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b30eb348-ecd4-46f2-a671-7a4cfd499b34","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b30eb348-ecd4-46f2-a671-7a4cfd499b34","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b30eb348-ecd4-46f2-a671-7a4cfd499b34","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20825957-6fb9-44da-a7b3-883347b6763f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54264","PortSpecifier":{"PortValue":54264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20825957-6fb9-44da-a7b3-883347b6763f","method":"POST","path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20825957-6fb9-44da-a7b3-883347b6763f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54264","PortSpecifier":{"PortValue":54264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741213,"nanos":432204771},"http":{"id":"20825957-6fb9-44da-a7b3-883347b6763f","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20825957-6fb9-44da-a7b3-883347b6763f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI"}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"20825957-6fb9-44da-a7b3-883347b6763f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI\"}"}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"20825957-6fb9-44da-a7b3-883347b6763f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","subscription":"e2e-rate-iso-a-085652","tenant":"e2e-shared-a-629c13","userId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"20825957-6fb9-44da-a7b3-883347b6763f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\",\"requestedSubscription\":\"e2e-rate-iso-a-085652\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"20825957-6fb9-44da-a7b3-883347b6763f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20825957-6fb9-44da-a7b3-883347b6763f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20825957-6fb9-44da-a7b3-883347b6763f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20825957-6fb9-44da-a7b3-883347b6763f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20825957-6fb9-44da-a7b3-883347b6763f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20825957-6fb9-44da-a7b3-883347b6763f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20825957-6fb9-44da-a7b3-883347b6763f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20825957-6fb9-44da-a7b3-883347b6763f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-085652"}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20825957-6fb9-44da-a7b3-883347b6763f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20825957-6fb9-44da-a7b3-883347b6763f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","selected_subscription":"e2e-rate-iso-a-085652","selected_subscription_key":"ai-tenant-e2e-shared-a-629c13/e2e-rate-iso-a-085652@ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20825957-6fb9-44da-a7b3-883347b6763f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:26:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20825957-6fb9-44da-a7b3-883347b6763f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6768aa45-4555-4426-9711-498cd03d2204","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54278","PortSpecifier":{"PortValue":54278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6768aa45-4555-4426-9711-498cd03d2204","method":"POST","path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6768aa45-4555-4426-9711-498cd03d2204","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54278","PortSpecifier":{"PortValue":54278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741214,"nanos":463421156},"http":{"id":"6768aa45-4555-4426-9711-498cd03d2204","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6768aa45-4555-4426-9711-498cd03d2204","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI"}
{"level":"debug","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6768aa45-4555-4426-9711-498cd03d2204","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI\"}"}
{"level":"debug","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6768aa45-4555-4426-9711-498cd03d2204","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","subscription":"e2e-rate-iso-a-085652","tenant":"e2e-shared-a-629c13","userId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6768aa45-4555-4426-9711-498cd03d2204","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\",\"requestedSubscription\":\"e2e-rate-iso-a-085652\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6768aa45-4555-4426-9711-498cd03d2204","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"}}
{"level":"debug","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6768aa45-4555-4426-9711-498cd03d2204","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6768aa45-4555-4426-9711-498cd03d2204","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6768aa45-4555-4426-9711-498cd03d2204","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6768aa45-4555-4426-9711-498cd03d2204","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6768aa45-4555-4426-9711-498cd03d2204","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6768aa45-4555-4426-9711-498cd03d2204","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6768aa45-4555-4426-9711-498cd03d2204","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-085652"}
{"level":"debug","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6768aa45-4555-4426-9711-498cd03d2204","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6768aa45-4555-4426-9711-498cd03d2204","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","selected_subscription":"e2e-rate-iso-a-085652","selected_subscription_key":"ai-tenant-e2e-shared-a-629c13/e2e-rate-iso-a-085652@ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6768aa45-4555-4426-9711-498cd03d2204","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:26:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6768aa45-4555-4426-9711-498cd03d2204","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54294","PortSpecifier":{"PortValue":54294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","method":"POST","path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54294","PortSpecifier":{"PortValue":54294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741215,"nanos":498015009},"http":{"id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI"}
{"level":"debug","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI\"}"}
{"level":"debug","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","subscription":"e2e-rate-iso-a-085652","tenant":"e2e-shared-a-629c13","userId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\",\"requestedSubscription\":\"e2e-rate-iso-a-085652\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"}}
{"level":"debug","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-085652"}
{"level":"debug","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","selected_subscription":"e2e-rate-iso-a-085652","selected_subscription_key":"ai-tenant-e2e-shared-a-629c13/e2e-rate-iso-a-085652@ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:26:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff6dbc23-c52c-495e-8c51-05af9ff7983a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54296","PortSpecifier":{"PortValue":54296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16a4f5f2-c27e-4bf7-b260-96a366003685","method":"POST","path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54296","PortSpecifier":{"PortValue":54296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741216,"nanos":530918037},"http":{"id":"16a4f5f2-c27e-4bf7-b260-96a366003685","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI"}
{"level":"debug","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI\"}"}
{"level":"debug","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","subscription":"e2e-rate-iso-a-085652","tenant":"e2e-shared-a-629c13","userId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\",\"requestedSubscription\":\"e2e-rate-iso-a-085652\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"}}
{"level":"debug","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-085652"}
{"level":"debug","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","selected_subscription":"e2e-rate-iso-a-085652","selected_subscription_key":"ai-tenant-e2e-shared-a-629c13/e2e-rate-iso-a-085652@ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:26:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16a4f5f2-c27e-4bf7-b260-96a366003685","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54298","PortSpecifier":{"PortValue":54298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","method":"POST","path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54298","PortSpecifier":{"PortValue":54298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741217,"nanos":567263414},"http":{"id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI"}
{"level":"debug","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI\"}"}
{"level":"debug","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","subscription":"e2e-rate-iso-a-085652","tenant":"e2e-shared-a-629c13","userId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\",\"requestedSubscription\":\"e2e-rate-iso-a-085652\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"}}
{"level":"debug","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-085652"}
{"level":"debug","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","selected_subscription":"e2e-rate-iso-a-085652","selected_subscription_key":"ai-tenant-e2e-shared-a-629c13/e2e-rate-iso-a-085652@ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:26:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70b7d1e7-f250-4d33-8e7c-a0e44996ff3f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54314","PortSpecifier":{"PortValue":54314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","method":"POST","path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54314","PortSpecifier":{"PortValue":54314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741218,"nanos":612964288},"http":{"id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI"}
{"level":"debug","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI\"}"}
{"level":"debug","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","subscription":"e2e-rate-iso-a-085652","tenant":"e2e-shared-a-629c13","userId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\",\"requestedSubscription\":\"e2e-rate-iso-a-085652\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"}}
{"level":"debug","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-085652"}
{"level":"debug","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","selected_subscription":"e2e-rate-iso-a-085652","selected_subscription_key":"ai-tenant-e2e-shared-a-629c13/e2e-rate-iso-a-085652@ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:26:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ad7fbe8-fb03-4b08-b1a1-9221df66cd32","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d7bce42-7329-45b6-8566-698841175808","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54328","PortSpecifier":{"PortValue":54328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d7bce42-7329-45b6-8566-698841175808","method":"POST","path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d7bce42-7329-45b6-8566-698841175808","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54328","PortSpecifier":{"PortValue":54328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741219,"nanos":649504498},"http":{"id":"9d7bce42-7329-45b6-8566-698841175808","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d7bce42-7329-45b6-8566-698841175808","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI"}
{"level":"debug","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9d7bce42-7329-45b6-8566-698841175808","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI\"}"}
{"level":"debug","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9d7bce42-7329-45b6-8566-698841175808","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","subscription":"e2e-rate-iso-a-085652","tenant":"e2e-shared-a-629c13","userId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9d7bce42-7329-45b6-8566-698841175808","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\",\"requestedSubscription\":\"e2e-rate-iso-a-085652\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9d7bce42-7329-45b6-8566-698841175808","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"}}
{"level":"debug","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d7bce42-7329-45b6-8566-698841175808","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d7bce42-7329-45b6-8566-698841175808","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d7bce42-7329-45b6-8566-698841175808","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d7bce42-7329-45b6-8566-698841175808","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d7bce42-7329-45b6-8566-698841175808","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d7bce42-7329-45b6-8566-698841175808","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d7bce42-7329-45b6-8566-698841175808","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-085652"}
{"level":"debug","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d7bce42-7329-45b6-8566-698841175808","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d7bce42-7329-45b6-8566-698841175808","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","selected_subscription":"e2e-rate-iso-a-085652","selected_subscription_key":"ai-tenant-e2e-shared-a-629c13/e2e-rate-iso-a-085652@ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d7bce42-7329-45b6-8566-698841175808","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:26:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d7bce42-7329-45b6-8566-698841175808","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54344","PortSpecifier":{"PortValue":54344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd6dc71e-4895-997d-acdf-86330dab87c8","method":"POST","path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54344","PortSpecifier":{"PortValue":54344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741220,"nanos":691661666},"http":{"id":"fd6dc71e-4895-997d-acdf-86330dab87c8","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI"}
{"level":"debug","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI\"}"}
{"level":"debug","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","subscription":"e2e-rate-iso-a-085652","tenant":"e2e-shared-a-629c13","userId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\",\"requestedSubscription\":\"e2e-rate-iso-a-085652\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"}}
{"level":"debug","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-085652"}
{"level":"debug","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","selected_subscription":"e2e-rate-iso-a-085652","selected_subscription_key":"ai-tenant-e2e-shared-a-629c13/e2e-rate-iso-a-085652@ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:27:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd6dc71e-4895-997d-acdf-86330dab87c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"997823bd-ec75-4472-b724-be4240ce43f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54360","PortSpecifier":{"PortValue":54360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"997823bd-ec75-4472-b724-be4240ce43f2","method":"POST","path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"997823bd-ec75-4472-b724-be4240ce43f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54360","PortSpecifier":{"PortValue":54360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741221,"nanos":722108812},"http":{"id":"997823bd-ec75-4472-b724-be4240ce43f2","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"997823bd-ec75-4472-b724-be4240ce43f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI"}
{"level":"debug","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"997823bd-ec75-4472-b724-be4240ce43f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI\"}"}
{"level":"debug","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"997823bd-ec75-4472-b724-be4240ce43f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","subscription":"e2e-rate-iso-a-085652","tenant":"e2e-shared-a-629c13","userId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"997823bd-ec75-4472-b724-be4240ce43f2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\",\"requestedSubscription\":\"e2e-rate-iso-a-085652\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"997823bd-ec75-4472-b724-be4240ce43f2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"}}
{"level":"debug","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"997823bd-ec75-4472-b724-be4240ce43f2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"997823bd-ec75-4472-b724-be4240ce43f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"997823bd-ec75-4472-b724-be4240ce43f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"997823bd-ec75-4472-b724-be4240ce43f2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"997823bd-ec75-4472-b724-be4240ce43f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"997823bd-ec75-4472-b724-be4240ce43f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"997823bd-ec75-4472-b724-be4240ce43f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"997823bd-ec75-4472-b724-be4240ce43f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-085652"}
{"level":"debug","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"997823bd-ec75-4472-b724-be4240ce43f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","selected_subscription":"e2e-rate-iso-a-085652","selected_subscription_key":"ai-tenant-e2e-shared-a-629c13/e2e-rate-iso-a-085652@ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"997823bd-ec75-4472-b724-be4240ce43f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:27:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"997823bd-ec75-4472-b724-be4240ce43f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41870","PortSpecifier":{"PortValue":41870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"941d97b6-959e-4f9c-882a-f4a09336667b","method":"POST","path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41870","PortSpecifier":{"PortValue":41870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741222,"nanos":753120559},"http":{"id":"941d97b6-959e-4f9c-882a-f4a09336667b","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI"}
{"level":"debug","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI\"}"}
{"level":"debug","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","subscription":"e2e-rate-iso-a-085652","tenant":"e2e-shared-a-629c13","userId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\",\"requestedSubscription\":\"e2e-rate-iso-a-085652\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"}}
{"level":"debug","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-085652"}
{"level":"debug","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","selected_subscription":"e2e-rate-iso-a-085652","selected_subscription_key":"ai-tenant-e2e-shared-a-629c13/e2e-rate-iso-a-085652@ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"941d97b6-959e-4f9c-882a-f4a09336667b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41874","PortSpecifier":{"PortValue":41874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","method":"POST","path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions","host":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41874","PortSpecifier":{"PortValue":41874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741223,"nanos":785230872},"http":{"id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","method":"POST","headers":{":authority":"e2e-shared-a-629c13.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI"}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5xkxfQWFxH2ZmZGU_LF4M0cqGdmRBVDELVUXc1Wa04zHWxpFO4WjpcvJv1AI\"}"}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","subscription":"e2e-rate-iso-a-085652","tenant":"e2e-shared-a-629c13","userId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\",\"requestedSubscription\":\"e2e-rate-iso-a-085652\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629c13.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"}}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-629c13/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-085652"}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9a84049a-27ef-4c7e-9d6b-a87ebbe3e926","keyName":"e2e-rate-a-085652","selected_subscription":"e2e-rate-iso-a-085652","selected_subscription_key":"ai-tenant-e2e-shared-a-629c13/e2e-rate-iso-a-085652@ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629c13","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-085652","namespace":"ai-tenant-e2e-shared-a-629c13","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-629c13/rate-test-model-629c13"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd4eee5b-2f5b-4c43-af70-e2252c881b6f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34930","PortSpecifier":{"PortValue":34930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","method":"POST","path":"/ai-tenant-e2e-shared-b-05e61d/rate-test-model-05e61d/v1/completions","host":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34930","PortSpecifier":{"PortValue":34930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784741223,"nanos":817308516},"http":{"id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","method":"POST","headers":{":authority":"e2e-shared-b-05e61d.apps.5e6bfd5d-22e5-4be1-9286-3bc22f15a725.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-05e61d/rate-test-model-05e61d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-R8cII4L1b5Rt8PvV_be8KbC6mrCKYQL2yX7QHCS2nN1Te6Eg4isdu0EAA7fJ"}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-05e61d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-R8cII4L1b5Rt8PvV_be8KbC6mrCKYQL2yX7QHCS2nN1Te6Eg4isdu0EAA7fJ\"}"}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-05e61d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4b66438e-3133-4e2d-8430-0c26acadbda9","keyName":"e2e-rate-b-085652","subscription":"e2e-rate-iso-b-085652","tenant":"e2e-shared-b-05e61d","userId":"4b66438e-3133-4e2d-8430-0c26acadbda9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-05e61d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-05e61d/rate-test-model-05e61d\",\"requestedSubscription\":\"e2e-rate-iso-b-085652\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-05e61d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-05e61d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-085652","namespace":"ai-tenant-e2e-shared-b-05e61d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-05e61d/rate-test-model-05e61d"}}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-05e61d/rate-test-model-05e61d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-05e61d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-085652"}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4b66438e-3133-4e2d-8430-0c26acadbda9","keyName":"e2e-rate-b-085652","selected_subscription":"e2e-rate-iso-b-085652","selected_subscription_key":"ai-tenant-e2e-shared-b-05e61d/e2e-rate-iso-b-085652@ai-tenant-e2e-shared-b-05e61d/rate-test-model-05e61d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-05e61d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-085652","namespace":"ai-tenant-e2e-shared-b-05e61d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-05e61d/rate-test-model-05e61d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ded0053-b7c4-4e4b-8bfe-089b4b237982","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T17:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/011220f00c7e0863f7ed7958f60ea21e0caef5624187f3669351301cd14d8a11"}
{"level":"info","ts":"2026-07-22T17:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b71c352b91a201284095b5e9a7eaafc8c76880d8cdf29020623d0e558980dd0"}
{"level":"info","ts":"2026-07-22T17:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69b398e0386baaa2bae7946cd34e5f48eb97ae2b4880cc56273ba4a86759ac8e"}
{"level":"info","ts":"2026-07-22T17:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0753038d1e0999294558fdf1fb52142308868a394b23b5d5091294d61ee5ba5b"}
{"level":"info","ts":"2026-07-22T17:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e03591e23696f7ba9be69ace1d51e0c9dc4b8492d0a76c9db08ba4c66356c38f"}
{"level":"info","ts":"2026-07-22T17:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02989cb6bfab03e2d16bc2c25f3db3971f53eb30bb3e17a2cb622346b38a0e6d"}
{"level":"info","ts":"2026-07-22T17:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5441ce8b776d61f060a71bfd793fbbd636dd2a4c52de0b4f5a9902511e4593f5"}
{"level":"info","ts":"2026-07-22T17:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f2ac063dcd44c8007de146769ef13a97c3c1a80ac6f514c976d5d6840f58fa6"}
{"level":"info","ts":"2026-07-22T17:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8f654f7c47bf8202d2abf2cd3410112dda780578634576046d0ccb2d37cef2b"}
{"level":"info","ts":"2026-07-22T17:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec361b85457bf1ebfb2bdf882008ec906e24053543b8660f8c9b0acbaacaf86a"}
{"level":"info","ts":"2026-07-22T17:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4277cb3c012439246209d13f1e2c7c3b7b1895fe9e8e43082936d312b8a9dd5"}
{"level":"info","ts":"2026-07-22T17:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7454d59d114079e109f7e74a008938b55146ba4d0af729e9dd6e117029f52eef"}
{"level":"info","ts":"2026-07-22T17:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff94f24d2297b528201790dfd01b64694d1357f66ba3bbb0eb4d6d6af2bf9a9a"}
{"level":"info","ts":"2026-07-22T17:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aca6e649dea7f0e8200968e003a4320b63092bf5c7bc936b4c46c142061573d"}
{"level":"info","ts":"2026-07-22T17:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b462ac4037a2598d1def2995014f2a00e50bc61854b0a765a9cf3805e85d05ad"}
{"level":"info","ts":"2026-07-22T17:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b1c116df5d6d18510b893385ed450746118adaae0546fd1346c57bc63bf99c1"}
{"level":"info","ts":"2026-07-22T17:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1233182ba9425ebbb6a753f73e2b2c6f127726fe817ecdd005590c45fec4dbb0"}
{"level":"info","ts":"2026-07-22T17:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e517b6f4c3c8295736c21bd680488281d4c1c81bd9fb359233c7f359d5ae339e"}
{"level":"info","ts":"2026-07-22T17:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ace62aeae41dacadc4d101ffbb9826a14b5c5b890b6a0d676fae74fa8d60c657"}
{"level":"info","ts":"2026-07-22T17:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48728c384f26129be68abc4ba7e89e701b04343aa6a9d605967a3028d4da5485"}
{"level":"info","ts":"2026-07-22T17:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e934cfc2655a4e69ba3c4eab087d5f27ed816a618d8b69ed45a75e5398dd4228"}
{"level":"info","ts":"2026-07-22T17:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38cc7bb4ec32ee2a272f7b8cda12bcfdfe6427bab74849e13c0c69b00c2ae07c"}
{"level":"info","ts":"2026-07-22T17:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f856159b77c5d7f9e5850139c3318ab1a0ea553f5aab80bed19150fff49fbd43"}
{"level":"info","ts":"2026-07-22T17:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f1f64a35082b2b320cad8666fb6251d1faad910064c24adf234709c64971e44"}