--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-03T10:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e82843eb47eac51e05d4a477efa2d58a09793d2388aa46ee9f3ccc6101b28a74"}
{"level":"info","ts":"2026-07-03T10:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/963078827b08f35a81d1693f0b54c27bfc98333621b77be89ba036fbeb24f836"}
{"level":"info","ts":"2026-07-03T10:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37a41b0c84a07963701db061c0f5df9f19fad665ba594dfb6aa415b8796945d4"}
{"level":"info","ts":"2026-07-03T10:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a42567ad7bcb9dc81be2e0683ee55475b896d59e12ac13eb00ab3318fcd808a2"}
{"level":"info","ts":"2026-07-03T10:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b5e1ac4a8923cf5fbf33007bf9fb97c887fa97e52dfb9abf880b82fdb4b5ddb"}
{"level":"info","ts":"2026-07-03T10:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/069bcfde7ea5537b447cd6b6f7e721efbd031de42692baddb9e8c98033cce2c8"}
{"level":"info","ts":"2026-07-03T10:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62ba594bbc48d500e12eccdc9650aebf5d5c98016b2402a834a99d42ff1629a0"}
{"level":"info","ts":"2026-07-03T10:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e1fa5dda90a5af8e74ec4af1f3cc55e9a934a4cb94b9d62ac27376531ebf2d2"}
{"level":"info","ts":"2026-07-03T10:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c93ddab6c4bb3ab910dd34c0dfa079783d3252045fa5db572ef8461c00f030c"}
{"level":"info","ts":"2026-07-03T10:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81ce79eacc610f4b59f40d7f2999d839ec186156c88b4e8437f11316bed6d181"}
{"level":"info","ts":"2026-07-03T10:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0353d8b6930654296f90419dce92bc5d574b9e091b175301b0ef3280eaa6d00d"}
{"level":"info","ts":"2026-07-03T10:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc1d5d70d1666acc6e2e5b56659d0452d98306d287d10d932d1c8e339555afe1"}
{"level":"info","ts":"2026-07-03T10:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb073d9d00ddd22076fa2ec8bf97a36f4a89c944cf933f25633cb275a6e0ef4d"}
{"level":"info","ts":"2026-07-03T10:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/816c17d6dc26f68add0c4ec089f09745704a4df1a07c06d35b6642be966dd3ef"}
{"level":"info","ts":"2026-07-03T10:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f5adff6241bd849966851dc9a84e1053a2364ffd52b022812cadaa44cdd1d2c"}
{"level":"info","ts":"2026-07-03T10:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2935f398bebe60a0818759b6830a4853575a5ad8718fc6502c6f18a4d4b789ba"}
{"level":"info","ts":"2026-07-03T10:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26ad7bdde8ee4f91a8eabc2cc6b08951261c1f33324cd28641c4e9b60a088e08"}
{"level":"info","ts":"2026-07-03T10:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5990519e200b88b6720aeb58b0ce688c8837dfc29fdbf782bc2f2a3d04a5868f"}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a"}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a"}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a"}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a"}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a"}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a"}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a"}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a"}
{"level":"error","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a"}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"debug","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d28571050ead83e943838359625620b1a10d81ef44c8fb3198cf0f6e3bff7522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d28571050ead83e943838359625620b1a10d81ef44c8fb3198cf0f6e3bff7522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d28571050ead83e943838359625620b1a10d81ef44c8fb3198cf0f6e3bff7522","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d28571050ead83e943838359625620b1a10d81ef44c8fb3198cf0f6e3bff7522"}
{"level":"debug","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d28571050ead83e943838359625620b1a10d81ef44c8fb3198cf0f6e3bff7522","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d28571050ead83e943838359625620b1a10d81ef44c8fb3198cf0f6e3bff7522"}
{"level":"debug","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d28571050ead83e943838359625620b1a10d81ef44c8fb3198cf0f6e3bff7522","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d28571050ead83e943838359625620b1a10d81ef44c8fb3198cf0f6e3bff7522"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d28571050ead83e943838359625620b1a10d81ef44c8fb3198cf0f6e3bff7522","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d28571050ead83e943838359625620b1a10d81ef44c8fb3198cf0f6e3bff7522","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d28571050ead83e943838359625620b1a10d81ef44c8fb3198cf0f6e3bff7522"}
{"level":"debug","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca0edd0f819f49f21f5dbb2ce80848e0ba84aae44d8f2b80235230003f5a0368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:39:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:39:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca0edd0f819f49f21f5dbb2ce80848e0ba84aae44d8f2b80235230003f5a0368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca0edd0f819f49f21f5dbb2ce80848e0ba84aae44d8f2b80235230003f5a0368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca0edd0f819f49f21f5dbb2ce80848e0ba84aae44d8f2b80235230003f5a0368"}
{"level":"debug","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca0edd0f819f49f21f5dbb2ce80848e0ba84aae44d8f2b80235230003f5a0368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca0edd0f819f49f21f5dbb2ce80848e0ba84aae44d8f2b80235230003f5a0368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca0edd0f819f49f21f5dbb2ce80848e0ba84aae44d8f2b80235230003f5a0368"}
{"level":"debug","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca0edd0f819f49f21f5dbb2ce80848e0ba84aae44d8f2b80235230003f5a0368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:39:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:39:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca0edd0f819f49f21f5dbb2ce80848e0ba84aae44d8f2b80235230003f5a0368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca0edd0f819f49f21f5dbb2ce80848e0ba84aae44d8f2b80235230003f5a0368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca0edd0f819f49f21f5dbb2ce80848e0ba84aae44d8f2b80235230003f5a0368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca0edd0f819f49f21f5dbb2ce80848e0ba84aae44d8f2b80235230003f5a0368"}
{"level":"info","ts":"2026-07-03T10:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e5fb3f609c88190c2ee24b67c353c969ad70dc0ef59615cfdb845bd9d16e367"}
{"level":"info","ts":"2026-07-03T10:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c62a0f03c2dba74724dec4f89c510a0dc9516e3a11750f9ce6167dea78cde08a"}
{"level":"info","ts":"2026-07-03T10:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d28571050ead83e943838359625620b1a10d81ef44c8fb3198cf0f6e3bff7522"}
{"level":"info","ts":"2026-07-03T10:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca0edd0f819f49f21f5dbb2ce80848e0ba84aae44d8f2b80235230003f5a0368"}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7974d6dd2f453aad97db969eab0a61660df0bd2948615b61d1779064684149","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7974d6dd2f453aad97db969eab0a61660df0bd2948615b61d1779064684149","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7974d6dd2f453aad97db969eab0a61660df0bd2948615b61d1779064684149"}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7974d6dd2f453aad97db969eab0a61660df0bd2948615b61d1779064684149","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d7974d6dd2f453aad97db969eab0a61660df0bd2948615b61d1779064684149"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7974d6dd2f453aad97db969eab0a61660df0bd2948615b61d1779064684149","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7974d6dd2f453aad97db969eab0a61660df0bd2948615b61d1779064684149","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7974d6dd2f453aad97db969eab0a61660df0bd2948615b61d1779064684149"}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3834bd906cca54e7e4d96f1a1012e3b4a707007e099dbe0a4599456314496e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3834bd906cca54e7e4d96f1a1012e3b4a707007e099dbe0a4599456314496e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3834bd906cca54e7e4d96f1a1012e3b4a707007e099dbe0a4599456314496e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3834bd906cca54e7e4d96f1a1012e3b4a707007e099dbe0a4599456314496e1"}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3834bd906cca54e7e4d96f1a1012e3b4a707007e099dbe0a4599456314496e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3834bd906cca54e7e4d96f1a1012e3b4a707007e099dbe0a4599456314496e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3834bd906cca54e7e4d96f1a1012e3b4a707007e099dbe0a4599456314496e1"}
{"level":"error","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c3834bd906cca54e7e4d96f1a1012e3b4a707007e099dbe0a4599456314496e1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c3834bd906cca54e7e4d96f1a1012e3b4a707007e099dbe0a4599456314496e1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3834bd906cca54e7e4d96f1a1012e3b4a707007e099dbe0a4599456314496e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3834bd906cca54e7e4d96f1a1012e3b4a707007e099dbe0a4599456314496e1"}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3834bd906cca54e7e4d96f1a1012e3b4a707007e099dbe0a4599456314496e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3834bd906cca54e7e4d96f1a1012e3b4a707007e099dbe0a4599456314496e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3834bd906cca54e7e4d96f1a1012e3b4a707007e099dbe0a4599456314496e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3834bd906cca54e7e4d96f1a1012e3b4a707007e099dbe0a4599456314496e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3834bd906cca54e7e4d96f1a1012e3b4a707007e099dbe0a4599456314496e1"}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593"}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593"}
{"level":"debug","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593"}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593"}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593"}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593"}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a"}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a"}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a"}
{"level":"error","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085db43a3968208efc9c7468ffa621995f598c9087d4e13dc4183b5551d47f36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a"}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085db43a3968208efc9c7468ffa621995f598c9087d4e13dc4183b5551d47f36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085db43a3968208efc9c7468ffa621995f598c9087d4e13dc4183b5551d47f36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085db43a3968208efc9c7468ffa621995f598c9087d4e13dc4183b5551d47f36"}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085db43a3968208efc9c7468ffa621995f598c9087d4e13dc4183b5551d47f36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085db43a3968208efc9c7468ffa621995f598c9087d4e13dc4183b5551d47f36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085db43a3968208efc9c7468ffa621995f598c9087d4e13dc4183b5551d47f36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a"}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085db43a3968208efc9c7468ffa621995f598c9087d4e13dc4183b5551d47f36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085db43a3968208efc9c7468ffa621995f598c9087d4e13dc4183b5551d47f36"}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085db43a3968208efc9c7468ffa621995f598c9087d4e13dc4183b5551d47f36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09256e9d320c188e14e938b2d1b2a88b683ab7e32046a43e5986b98489e821d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09256e9d320c188e14e938b2d1b2a88b683ab7e32046a43e5986b98489e821d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a"}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4997cc27655b94e81822ea03eb8758711fe21803871d906d228ea61d8d0df9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4997cc27655b94e81822ea03eb8758711fe21803871d906d228ea61d8d0df9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09256e9d320c188e14e938b2d1b2a88b683ab7e32046a43e5986b98489e821d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09256e9d320c188e14e938b2d1b2a88b683ab7e32046a43e5986b98489e821d9"}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09256e9d320c188e14e938b2d1b2a88b683ab7e32046a43e5986b98489e821d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4997cc27655b94e81822ea03eb8758711fe21803871d906d228ea61d8d0df9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09256e9d320c188e14e938b2d1b2a88b683ab7e32046a43e5986b98489e821d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09256e9d320c188e14e938b2d1b2a88b683ab7e32046a43e5986b98489e821d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085db43a3968208efc9c7468ffa621995f598c9087d4e13dc4183b5551d47f36"}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09256e9d320c188e14e938b2d1b2a88b683ab7e32046a43e5986b98489e821d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4997cc27655b94e81822ea03eb8758711fe21803871d906d228ea61d8d0df9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4997cc27655b94e81822ea03eb8758711fe21803871d906d228ea61d8d0df9d"}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4997cc27655b94e81822ea03eb8758711fe21803871d906d228ea61d8d0df9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09256e9d320c188e14e938b2d1b2a88b683ab7e32046a43e5986b98489e821d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4997cc27655b94e81822ea03eb8758711fe21803871d906d228ea61d8d0df9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4997cc27655b94e81822ea03eb8758711fe21803871d906d228ea61d8d0df9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4997cc27655b94e81822ea03eb8758711fe21803871d906d228ea61d8d0df9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4997cc27655b94e81822ea03eb8758711fe21803871d906d228ea61d8d0df9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4997cc27655b94e81822ea03eb8758711fe21803871d906d228ea61d8d0df9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a"}
{"level":"error","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f4997cc27655b94e81822ea03eb8758711fe21803871d906d228ea61d8d0df9d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f4997cc27655b94e81822ea03eb8758711fe21803871d906d228ea61d8d0df9d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4997cc27655b94e81822ea03eb8758711fe21803871d906d228ea61d8d0df9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4997cc27655b94e81822ea03eb8758711fe21803871d906d228ea61d8d0df9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09256e9d320c188e14e938b2d1b2a88b683ab7e32046a43e5986b98489e821d9"}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4997cc27655b94e81822ea03eb8758711fe21803871d906d228ea61d8d0df9d"}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731"}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3"}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731"}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3"}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731"}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731"}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3"}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731"}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731"}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731"}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731"}
{"level":"debug","ts":"2026-07-03T10:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731"}
{"level":"debug","ts":"2026-07-03T10:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731"}
{"level":"debug","ts":"2026-07-03T10:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f"}
{"level":"debug","ts":"2026-07-03T10:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f"}
{"level":"debug","ts":"2026-07-03T10:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f"}
{"level":"info","ts":"2026-07-03T10:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f"}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f"}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f"}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f"}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f"}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac14724130c4b31648a2d2c96c9bbac59e3599d0c0d2f69fc92d3a2d98322bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac14724130c4b31648a2d2c96c9bbac59e3599d0c0d2f69fc92d3a2d98322bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fac14724130c4b31648a2d2c96c9bbac59e3599d0c0d2f69fc92d3a2d98322bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac14724130c4b31648a2d2c96c9bbac59e3599d0c0d2f69fc92d3a2d98322bc"}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac14724130c4b31648a2d2c96c9bbac59e3599d0c0d2f69fc92d3a2d98322bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fac14724130c4b31648a2d2c96c9bbac59e3599d0c0d2f69fc92d3a2d98322bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac14724130c4b31648a2d2c96c9bbac59e3599d0c0d2f69fc92d3a2d98322bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fac14724130c4b31648a2d2c96c9bbac59e3599d0c0d2f69fc92d3a2d98322bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f"}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac14724130c4b31648a2d2c96c9bbac59e3599d0c0d2f69fc92d3a2d98322bc"}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f08424bd68c04e47e918954dfea311b604519c0d4d8fa44649bd93f874388c64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f08424bd68c04e47e918954dfea311b604519c0d4d8fa44649bd93f874388c64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f08424bd68c04e47e918954dfea311b604519c0d4d8fa44649bd93f874388c64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f08424bd68c04e47e918954dfea311b604519c0d4d8fa44649bd93f874388c64"}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f08424bd68c04e47e918954dfea311b604519c0d4d8fa44649bd93f874388c64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f08424bd68c04e47e918954dfea311b604519c0d4d8fa44649bd93f874388c64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f08424bd68c04e47e918954dfea311b604519c0d4d8fa44649bd93f874388c64"}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e8f400dd10cf370bac8c949386955ecd378f1d1dcaf4bb0c18973a4acd156f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e8f400dd10cf370bac8c949386955ecd378f1d1dcaf4bb0c18973a4acd156f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f08424bd68c04e47e918954dfea311b604519c0d4d8fa44649bd93f874388c64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f08424bd68c04e47e918954dfea311b604519c0d4d8fa44649bd93f874388c64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e8f400dd10cf370bac8c949386955ecd378f1d1dcaf4bb0c18973a4acd156f"}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f08424bd68c04e47e918954dfea311b604519c0d4d8fa44649bd93f874388c64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e8f400dd10cf370bac8c949386955ecd378f1d1dcaf4bb0c18973a4acd156f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e8f400dd10cf370bac8c949386955ecd378f1d1dcaf4bb0c18973a4acd156f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f08424bd68c04e47e918954dfea311b604519c0d4d8fa44649bd93f874388c64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e8f400dd10cf370bac8c949386955ecd378f1d1dcaf4bb0c18973a4acd156f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e8f400dd10cf370bac8c949386955ecd378f1d1dcaf4bb0c18973a4acd156f"}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e8f400dd10cf370bac8c949386955ecd378f1d1dcaf4bb0c18973a4acd156f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e8f400dd10cf370bac8c949386955ecd378f1d1dcaf4bb0c18973a4acd156f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e8f400dd10cf370bac8c949386955ecd378f1d1dcaf4bb0c18973a4acd156f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e8f400dd10cf370bac8c949386955ecd378f1d1dcaf4bb0c18973a4acd156f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f08424bd68c04e47e918954dfea311b604519c0d4d8fa44649bd93f874388c64"}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8192385aa47819b7f74f465d5c83e9a6550ef736585972d4bae66a01cfa3f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e8f400dd10cf370bac8c949386955ecd378f1d1dcaf4bb0c18973a4acd156f"}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8192385aa47819b7f74f465d5c83e9a6550ef736585972d4bae66a01cfa3f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8192385aa47819b7f74f465d5c83e9a6550ef736585972d4bae66a01cfa3f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8192385aa47819b7f74f465d5c83e9a6550ef736585972d4bae66a01cfa3f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8192385aa47819b7f74f465d5c83e9a6550ef736585972d4bae66a01cfa3f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8192385aa47819b7f74f465d5c83e9a6550ef736585972d4bae66a01cfa3f9a"}
{"level":"error","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d8192385aa47819b7f74f465d5c83e9a6550ef736585972d4bae66a01cfa3f9a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d8192385aa47819b7f74f465d5c83e9a6550ef736585972d4bae66a01cfa3f9a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8192385aa47819b7f74f465d5c83e9a6550ef736585972d4bae66a01cfa3f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8192385aa47819b7f74f465d5c83e9a6550ef736585972d4bae66a01cfa3f9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8192385aa47819b7f74f465d5c83e9a6550ef736585972d4bae66a01cfa3f9a"}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22dece0f641f1badb084d71e3504651b5924bed19bb77e73b8bd0f28d5a15aa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22dece0f641f1badb084d71e3504651b5924bed19bb77e73b8bd0f28d5a15aa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22dece0f641f1badb084d71e3504651b5924bed19bb77e73b8bd0f28d5a15aa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22dece0f641f1badb084d71e3504651b5924bed19bb77e73b8bd0f28d5a15aa5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22dece0f641f1badb084d71e3504651b5924bed19bb77e73b8bd0f28d5a15aa5"}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8192385aa47819b7f74f465d5c83e9a6550ef736585972d4bae66a01cfa3f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8192385aa47819b7f74f465d5c83e9a6550ef736585972d4bae66a01cfa3f9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8192385aa47819b7f74f465d5c83e9a6550ef736585972d4bae66a01cfa3f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22dece0f641f1badb084d71e3504651b5924bed19bb77e73b8bd0f28d5a15aa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8192385aa47819b7f74f465d5c83e9a6550ef736585972d4bae66a01cfa3f9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22dece0f641f1badb084d71e3504651b5924bed19bb77e73b8bd0f28d5a15aa5"}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22dece0f641f1badb084d71e3504651b5924bed19bb77e73b8bd0f28d5a15aa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22dece0f641f1badb084d71e3504651b5924bed19bb77e73b8bd0f28d5a15aa5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8192385aa47819b7f74f465d5c83e9a6550ef736585972d4bae66a01cfa3f9a"}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22dece0f641f1badb084d71e3504651b5924bed19bb77e73b8bd0f28d5a15aa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c713d6c8a4f48794e83aa980f4ef8da6001dc573c230b3a94bebd80cd923a8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c713d6c8a4f48794e83aa980f4ef8da6001dc573c230b3a94bebd80cd923a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22dece0f641f1badb084d71e3504651b5924bed19bb77e73b8bd0f28d5a15aa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c713d6c8a4f48794e83aa980f4ef8da6001dc573c230b3a94bebd80cd923a8a"}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c713d6c8a4f48794e83aa980f4ef8da6001dc573c230b3a94bebd80cd923a8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c713d6c8a4f48794e83aa980f4ef8da6001dc573c230b3a94bebd80cd923a8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22dece0f641f1badb084d71e3504651b5924bed19bb77e73b8bd0f28d5a15aa5"}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c713d6c8a4f48794e83aa980f4ef8da6001dc573c230b3a94bebd80cd923a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c713d6c8a4f48794e83aa980f4ef8da6001dc573c230b3a94bebd80cd923a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c713d6c8a4f48794e83aa980f4ef8da6001dc573c230b3a94bebd80cd923a8a"}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af14a03931d9a47836e5d2713d0cd982938058a01191598daaf66bc4e6efefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af14a03931d9a47836e5d2713d0cd982938058a01191598daaf66bc4e6efefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af14a03931d9a47836e5d2713d0cd982938058a01191598daaf66bc4e6efefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af14a03931d9a47836e5d2713d0cd982938058a01191598daaf66bc4e6efefb"}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af14a03931d9a47836e5d2713d0cd982938058a01191598daaf66bc4e6efefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af14a03931d9a47836e5d2713d0cd982938058a01191598daaf66bc4e6efefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3af14a03931d9a47836e5d2713d0cd982938058a01191598daaf66bc4e6efefb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af14a03931d9a47836e5d2713d0cd982938058a01191598daaf66bc4e6efefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af14a03931d9a47836e5d2713d0cd982938058a01191598daaf66bc4e6efefb"}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af14a03931d9a47836e5d2713d0cd982938058a01191598daaf66bc4e6efefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"080dd48a5db57c707f9c5c4baf987d80df6001545c698a897a9d0bfd0360b343","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/080dd48a5db57c707f9c5c4baf987d80df6001545c698a897a9d0bfd0360b343"}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"080dd48a5db57c707f9c5c4baf987d80df6001545c698a897a9d0bfd0360b343","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"080dd48a5db57c707f9c5c4baf987d80df6001545c698a897a9d0bfd0360b343","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["080dd48a5db57c707f9c5c4baf987d80df6001545c698a897a9d0bfd0360b343"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"080dd48a5db57c707f9c5c4baf987d80df6001545c698a897a9d0bfd0360b343","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"080dd48a5db57c707f9c5c4baf987d80df6001545c698a897a9d0bfd0360b343","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:41:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["080dd48a5db57c707f9c5c4baf987d80df6001545c698a897a9d0bfd0360b343"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af14a03931d9a47836e5d2713d0cd982938058a01191598daaf66bc4e6efefb"}
{"level":"error","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"080dd48a5db57c707f9c5c4baf987d80df6001545c698a897a9d0bfd0360b343","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"080dd48a5db57c707f9c5c4baf987d80df6001545c698a897a9d0bfd0360b343\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"080dd48a5db57c707f9c5c4baf987d80df6001545c698a897a9d0bfd0360b343","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"080dd48a5db57c707f9c5c4baf987d80df6001545c698a897a9d0bfd0360b343","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"}
{"level":"info","ts":"2026-07-03T10:41:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/080dd48a5db57c707f9c5c4baf987d80df6001545c698a897a9d0bfd0360b343"}
{"level":"info","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c9973a5-8d6e-430e-b446-701e4ec231e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41662","PortSpecifier":{"PortValue":41662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c9973a5-8d6e-430e-b446-701e4ec231e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c9973a5-8d6e-430e-b446-701e4ec231e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41662","PortSpecifier":{"PortValue":41662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075307,"nanos":676956045},"http":{"id":"8c9973a5-8d6e-430e-b446-701e4ec231e7","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8c9973a5-8d6e-430e-b446-701e4ec231e7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c9973a5-8d6e-430e-b446-701e4ec231e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c9973a5-8d6e-430e-b446-701e4ec231e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c9973a5-8d6e-430e-b446-701e4ec231e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c9973a5-8d6e-430e-b446-701e4ec231e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c9973a5-8d6e-430e-b446-701e4ec231e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/auth-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c9973a5-8d6e-430e-b446-701e4ec231e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c9973a5-8d6e-430e-b446-701e4ec231e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c9973a5-8d6e-430e-b446-701e4ec231e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c9973a5-8d6e-430e-b446-701e4ec231e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c9973a5-8d6e-430e-b446-701e4ec231e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fed1d63-8f9f-4771-b07a-f7a1ad9e86bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53472","PortSpecifier":{"PortValue":53472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4fed1d63-8f9f-4771-b07a-f7a1ad9e86bd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fed1d63-8f9f-4771-b07a-f7a1ad9e86bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53472","PortSpecifier":{"PortValue":53472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075307,"nanos":741879335},"http":{"id":"4fed1d63-8f9f-4771-b07a-f7a1ad9e86bd","method":"POST","headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4fed1d63-8f9f-4771-b07a-f7a1ad9e86bd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4fed1d63-8f9f-4771-b07a-f7a1ad9e86bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4fed1d63-8f9f-4771-b07a-f7a1ad9e86bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fed1d63-8f9f-4771-b07a-f7a1ad9e86bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fed1d63-8f9f-4771-b07a-f7a1ad9e86bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fed1d63-8f9f-4771-b07a-f7a1ad9e86bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-62c45e/auth-test-model-62c45e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4fed1d63-8f9f-4771-b07a-f7a1ad9e86bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fed1d63-8f9f-4771-b07a-f7a1ad9e86bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fed1d63-8f9f-4771-b07a-f7a1ad9e86bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fed1d63-8f9f-4771-b07a-f7a1ad9e86bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fed1d63-8f9f-4771-b07a-f7a1ad9e86bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b749c5d2-17a9-48e9-acc0-55f515d80ab4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41664","PortSpecifier":{"PortValue":41664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b749c5d2-17a9-48e9-acc0-55f515d80ab4","method":"GET","path":"/maas-api/v1/api-keys/8509765e-f1cc-412a-9d83-2465d8c79966","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b749c5d2-17a9-48e9-acc0-55f515d80ab4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41664","PortSpecifier":{"PortValue":41664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075307,"nanos":832506734},"http":{"id":"b749c5d2-17a9-48e9-acc0-55f515d80ab4","method":"GET","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8509765e-f1cc-412a-9d83-2465d8c79966",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b749c5d2-17a9-48e9-acc0-55f515d80ab4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b749c5d2-17a9-48e9-acc0-55f515d80ab4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b749c5d2-17a9-48e9-acc0-55f515d80ab4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8509765e-f1cc-412a-9d83-2465d8c79966",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b749c5d2-17a9-48e9-acc0-55f515d80ab4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b749c5d2-17a9-48e9-acc0-55f515d80ab4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b749c5d2-17a9-48e9-acc0-55f515d80ab4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/auth-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b749c5d2-17a9-48e9-acc0-55f515d80ab4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b749c5d2-17a9-48e9-acc0-55f515d80ab4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b749c5d2-17a9-48e9-acc0-55f515d80ab4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b749c5d2-17a9-48e9-acc0-55f515d80ab4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b749c5d2-17a9-48e9-acc0-55f515d80ab4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07bf36e8-38e6-4a22-92ac-dbea41982313","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53484","PortSpecifier":{"PortValue":53484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07bf36e8-38e6-4a22-92ac-dbea41982313","method":"GET","path":"/maas-api/v1/api-keys/bcd97b62-4dc7-4de1-b416-872ee6312276","host":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07bf36e8-38e6-4a22-92ac-dbea41982313","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53484","PortSpecifier":{"PortValue":53484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075307,"nanos":871944985},"http":{"id":"07bf36e8-38e6-4a22-92ac-dbea41982313","method":"GET","headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bcd97b62-4dc7-4de1-b416-872ee6312276",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07bf36e8-38e6-4a22-92ac-dbea41982313","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07bf36e8-38e6-4a22-92ac-dbea41982313","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07bf36e8-38e6-4a22-92ac-dbea41982313","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bcd97b62-4dc7-4de1-b416-872ee6312276",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07bf36e8-38e6-4a22-92ac-dbea41982313","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07bf36e8-38e6-4a22-92ac-dbea41982313","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07bf36e8-38e6-4a22-92ac-dbea41982313","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-62c45e/auth-test-model-62c45e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07bf36e8-38e6-4a22-92ac-dbea41982313","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07bf36e8-38e6-4a22-92ac-dbea41982313","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07bf36e8-38e6-4a22-92ac-dbea41982313","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07bf36e8-38e6-4a22-92ac-dbea41982313","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07bf36e8-38e6-4a22-92ac-dbea41982313","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95a5b425-0d11-4123-b037-c9b0fa035dac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55686","PortSpecifier":{"PortValue":55686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95a5b425-0d11-4123-b037-c9b0fa035dac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95a5b425-0d11-4123-b037-c9b0fa035dac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55686","PortSpecifier":{"PortValue":55686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075322,"nanos":864369444},"http":{"id":"95a5b425-0d11-4123-b037-c9b0fa035dac","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"95a5b425-0d11-4123-b037-c9b0fa035dac","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95a5b425-0d11-4123-b037-c9b0fa035dac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95a5b425-0d11-4123-b037-c9b0fa035dac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95a5b425-0d11-4123-b037-c9b0fa035dac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95a5b425-0d11-4123-b037-c9b0fa035dac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95a5b425-0d11-4123-b037-c9b0fa035dac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/auth-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"95a5b425-0d11-4123-b037-c9b0fa035dac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95a5b425-0d11-4123-b037-c9b0fa035dac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95a5b425-0d11-4123-b037-c9b0fa035dac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95a5b425-0d11-4123-b037-c9b0fa035dac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95a5b425-0d11-4123-b037-c9b0fa035dac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76008c46-b384-4ca8-8c46-cfd08c0d91ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60220","PortSpecifier":{"PortValue":60220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76008c46-b384-4ca8-8c46-cfd08c0d91ce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76008c46-b384-4ca8-8c46-cfd08c0d91ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60220","PortSpecifier":{"PortValue":60220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075322,"nanos":923012614},"http":{"id":"76008c46-b384-4ca8-8c46-cfd08c0d91ce","method":"POST","headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"76008c46-b384-4ca8-8c46-cfd08c0d91ce","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76008c46-b384-4ca8-8c46-cfd08c0d91ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76008c46-b384-4ca8-8c46-cfd08c0d91ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76008c46-b384-4ca8-8c46-cfd08c0d91ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76008c46-b384-4ca8-8c46-cfd08c0d91ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76008c46-b384-4ca8-8c46-cfd08c0d91ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-62c45e/auth-test-model-62c45e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76008c46-b384-4ca8-8c46-cfd08c0d91ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76008c46-b384-4ca8-8c46-cfd08c0d91ce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76008c46-b384-4ca8-8c46-cfd08c0d91ce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76008c46-b384-4ca8-8c46-cfd08c0d91ce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76008c46-b384-4ca8-8c46-cfd08c0d91ce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78e13f55-590b-4ce9-a6f9-530f15cb7122","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55696","PortSpecifier":{"PortValue":55696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78e13f55-590b-4ce9-a6f9-530f15cb7122","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78e13f55-590b-4ce9-a6f9-530f15cb7122","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55696","PortSpecifier":{"PortValue":55696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075322,"nanos":975176881},"http":{"id":"78e13f55-590b-4ce9-a6f9-530f15cb7122","method":"GET","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78e13f55-590b-4ce9-a6f9-530f15cb7122","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KKYAg4o1Rq1xdeV4_tXbqrZAne8SV8ktGOqXT0fyRmtmtvcBCQbiYLFh7OgB"}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78e13f55-590b-4ce9-a6f9-530f15cb7122","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KKYAg4o1Rq1xdeV4_tXbqrZAne8SV8ktGOqXT0fyRmtmtvcBCQbiYLFh7OgB\"}"}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78e13f55-590b-4ce9-a6f9-530f15cb7122","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d0d09e27-37ee-4c7a-be85-cdeba269c96c","keyName":"e2e-auth-iso-a-ee5293","subscription":"e2e-auth-iso-d628d2","tenant":"e2e-shared-a-cda536","userId":"d0d09e27-37ee-4c7a-be85-cdeba269c96c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78e13f55-590b-4ce9-a6f9-530f15cb7122","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78e13f55-590b-4ce9-a6f9-530f15cb7122","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78e13f55-590b-4ce9-a6f9-530f15cb7122","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78e13f55-590b-4ce9-a6f9-530f15cb7122","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/auth-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78e13f55-590b-4ce9-a6f9-530f15cb7122","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78e13f55-590b-4ce9-a6f9-530f15cb7122","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d628d2"}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78e13f55-590b-4ce9-a6f9-530f15cb7122","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78e13f55-590b-4ce9-a6f9-530f15cb7122","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78e13f55-590b-4ce9-a6f9-530f15cb7122","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78e13f55-590b-4ce9-a6f9-530f15cb7122","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d34f5b1d-8773-4628-86df-7c5c72671560","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47616","PortSpecifier":{"PortValue":47616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d34f5b1d-8773-4628-86df-7c5c72671560","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d34f5b1d-8773-4628-86df-7c5c72671560","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47616","PortSpecifier":{"PortValue":47616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075347,"nanos":394355677},"http":{"id":"d34f5b1d-8773-4628-86df-7c5c72671560","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d34f5b1d-8773-4628-86df-7c5c72671560","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d34f5b1d-8773-4628-86df-7c5c72671560","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d34f5b1d-8773-4628-86df-7c5c72671560","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d34f5b1d-8773-4628-86df-7c5c72671560","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d34f5b1d-8773-4628-86df-7c5c72671560","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d34f5b1d-8773-4628-86df-7c5c72671560","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/auth-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d34f5b1d-8773-4628-86df-7c5c72671560","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d34f5b1d-8773-4628-86df-7c5c72671560","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d34f5b1d-8773-4628-86df-7c5c72671560","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d34f5b1d-8773-4628-86df-7c5c72671560","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d34f5b1d-8773-4628-86df-7c5c72671560","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2af6c81-d4e6-44ce-b4da-86b56b2dc51a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46474","PortSpecifier":{"PortValue":46474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2af6c81-d4e6-44ce-b4da-86b56b2dc51a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2af6c81-d4e6-44ce-b4da-86b56b2dc51a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46474","PortSpecifier":{"PortValue":46474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075347,"nanos":430441387},"http":{"id":"d2af6c81-d4e6-44ce-b4da-86b56b2dc51a","method":"POST","headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d2af6c81-d4e6-44ce-b4da-86b56b2dc51a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2af6c81-d4e6-44ce-b4da-86b56b2dc51a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2af6c81-d4e6-44ce-b4da-86b56b2dc51a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2af6c81-d4e6-44ce-b4da-86b56b2dc51a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2af6c81-d4e6-44ce-b4da-86b56b2dc51a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2af6c81-d4e6-44ce-b4da-86b56b2dc51a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-62c45e/auth-test-model-62c45e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d2af6c81-d4e6-44ce-b4da-86b56b2dc51a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2af6c81-d4e6-44ce-b4da-86b56b2dc51a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2af6c81-d4e6-44ce-b4da-86b56b2dc51a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2af6c81-d4e6-44ce-b4da-86b56b2dc51a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2af6c81-d4e6-44ce-b4da-86b56b2dc51a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0c535bc-5aa5-434e-a4f7-00d7c35c8549","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46478","PortSpecifier":{"PortValue":46478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0c535bc-5aa5-434e-a4f7-00d7c35c8549","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0c535bc-5aa5-434e-a4f7-00d7c35c8549","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46478","PortSpecifier":{"PortValue":46478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075347,"nanos":472610087},"http":{"id":"d0c535bc-5aa5-434e-a4f7-00d7c35c8549","method":"GET","headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0c535bc-5aa5-434e-a4f7-00d7c35c8549","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-R8nYTdDC2zw8mvRi_Yms1N5uS7anrcADGjh4qZwypM9U2hnjJwgCU25lgY9d"}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d0c535bc-5aa5-434e-a4f7-00d7c35c8549","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-62c45e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-R8nYTdDC2zw8mvRi_Yms1N5uS7anrcADGjh4qZwypM9U2hnjJwgCU25lgY9d\"}"}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d0c535bc-5aa5-434e-a4f7-00d7c35c8549","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-62c45e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0c535bc-5aa5-434e-a4f7-00d7c35c8549","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0c535bc-5aa5-434e-a4f7-00d7c35c8549","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"d0c535bc-5aa5-434e-a4f7-00d7c35c8549","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0c535bc-5aa5-434e-a4f7-00d7c35c8549","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-03T10:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0c535bc-5aa5-434e-a4f7-00d7c35c8549","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5007e369-2392-433a-8a20-6e2f142024df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58458","PortSpecifier":{"PortValue":58458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5007e369-2392-433a-8a20-6e2f142024df","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5007e369-2392-433a-8a20-6e2f142024df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58458","PortSpecifier":{"PortValue":58458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075365,"nanos":542627381},"http":{"id":"5007e369-2392-433a-8a20-6e2f142024df","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5007e369-2392-433a-8a20-6e2f142024df","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5007e369-2392-433a-8a20-6e2f142024df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5007e369-2392-433a-8a20-6e2f142024df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5007e369-2392-433a-8a20-6e2f142024df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5007e369-2392-433a-8a20-6e2f142024df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5007e369-2392-433a-8a20-6e2f142024df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/auth-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5007e369-2392-433a-8a20-6e2f142024df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5007e369-2392-433a-8a20-6e2f142024df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5007e369-2392-433a-8a20-6e2f142024df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5007e369-2392-433a-8a20-6e2f142024df","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5007e369-2392-433a-8a20-6e2f142024df","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e072034-9e45-4174-b035-b5f9e6414c3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48682","PortSpecifier":{"PortValue":48682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e072034-9e45-4174-b035-b5f9e6414c3c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e072034-9e45-4174-b035-b5f9e6414c3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48682","PortSpecifier":{"PortValue":48682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075365,"nanos":580700517},"http":{"id":"0e072034-9e45-4174-b035-b5f9e6414c3c","method":"POST","headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e072034-9e45-4174-b035-b5f9e6414c3c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e072034-9e45-4174-b035-b5f9e6414c3c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e072034-9e45-4174-b035-b5f9e6414c3c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e072034-9e45-4174-b035-b5f9e6414c3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e072034-9e45-4174-b035-b5f9e6414c3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e072034-9e45-4174-b035-b5f9e6414c3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-62c45e/auth-test-model-62c45e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e072034-9e45-4174-b035-b5f9e6414c3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e072034-9e45-4174-b035-b5f9e6414c3c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e072034-9e45-4174-b035-b5f9e6414c3c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e072034-9e45-4174-b035-b5f9e6414c3c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e072034-9e45-4174-b035-b5f9e6414c3c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d49c223-bc64-4e1a-ae75-9616854661d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58462","PortSpecifier":{"PortValue":58462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d49c223-bc64-4e1a-ae75-9616854661d3","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d49c223-bc64-4e1a-ae75-9616854661d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58462","PortSpecifier":{"PortValue":58462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075365,"nanos":620522585},"http":{"id":"5d49c223-bc64-4e1a-ae75-9616854661d3","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5d49c223-bc64-4e1a-ae75-9616854661d3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d49c223-bc64-4e1a-ae75-9616854661d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d49c223-bc64-4e1a-ae75-9616854661d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d49c223-bc64-4e1a-ae75-9616854661d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d49c223-bc64-4e1a-ae75-9616854661d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d49c223-bc64-4e1a-ae75-9616854661d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/auth-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d49c223-bc64-4e1a-ae75-9616854661d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d49c223-bc64-4e1a-ae75-9616854661d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d49c223-bc64-4e1a-ae75-9616854661d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d49c223-bc64-4e1a-ae75-9616854661d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d49c223-bc64-4e1a-ae75-9616854661d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43427920-c735-43db-93ed-10c54c62ef7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48694","PortSpecifier":{"PortValue":48694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43427920-c735-43db-93ed-10c54c62ef7d","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43427920-c735-43db-93ed-10c54c62ef7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48694","PortSpecifier":{"PortValue":48694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075365,"nanos":660318339},"http":{"id":"43427920-c735-43db-93ed-10c54c62ef7d","method":"POST","headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"43427920-c735-43db-93ed-10c54c62ef7d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43427920-c735-43db-93ed-10c54c62ef7d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43427920-c735-43db-93ed-10c54c62ef7d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43427920-c735-43db-93ed-10c54c62ef7d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43427920-c735-43db-93ed-10c54c62ef7d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43427920-c735-43db-93ed-10c54c62ef7d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-62c45e/auth-test-model-62c45e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43427920-c735-43db-93ed-10c54c62ef7d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43427920-c735-43db-93ed-10c54c62ef7d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43427920-c735-43db-93ed-10c54c62ef7d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43427920-c735-43db-93ed-10c54c62ef7d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:42:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43427920-c735-43db-93ed-10c54c62ef7d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4673436-732e-468a-b186-bc70a25e5274","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53346","PortSpecifier":{"PortValue":53346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4673436-732e-468a-b186-bc70a25e5274","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4673436-732e-468a-b186-bc70a25e5274","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53346","PortSpecifier":{"PortValue":53346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075380,"nanos":661921576},"http":{"id":"c4673436-732e-468a-b186-bc70a25e5274","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4673436-732e-468a-b186-bc70a25e5274","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4673436-732e-468a-b186-bc70a25e5274","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4673436-732e-468a-b186-bc70a25e5274","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4673436-732e-468a-b186-bc70a25e5274","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4673436-732e-468a-b186-bc70a25e5274","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4673436-732e-468a-b186-bc70a25e5274","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/auth-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4673436-732e-468a-b186-bc70a25e5274","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4673436-732e-468a-b186-bc70a25e5274","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4673436-732e-468a-b186-bc70a25e5274","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4673436-732e-468a-b186-bc70a25e5274","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4673436-732e-468a-b186-bc70a25e5274","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"602446c8-54cc-4e99-8af2-120597f4b593","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39160","PortSpecifier":{"PortValue":39160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"602446c8-54cc-4e99-8af2-120597f4b593","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"602446c8-54cc-4e99-8af2-120597f4b593","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39160","PortSpecifier":{"PortValue":39160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075380,"nanos":698464011},"http":{"id":"602446c8-54cc-4e99-8af2-120597f4b593","method":"POST","headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"602446c8-54cc-4e99-8af2-120597f4b593","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"602446c8-54cc-4e99-8af2-120597f4b593","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"602446c8-54cc-4e99-8af2-120597f4b593","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"602446c8-54cc-4e99-8af2-120597f4b593","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"602446c8-54cc-4e99-8af2-120597f4b593","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"602446c8-54cc-4e99-8af2-120597f4b593","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-62c45e/auth-test-model-62c45e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"602446c8-54cc-4e99-8af2-120597f4b593","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"602446c8-54cc-4e99-8af2-120597f4b593","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"602446c8-54cc-4e99-8af2-120597f4b593","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"602446c8-54cc-4e99-8af2-120597f4b593","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"602446c8-54cc-4e99-8af2-120597f4b593","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b79ebcc-17cb-416b-a5b2-d77af0716103","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37462","PortSpecifier":{"PortValue":37462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b79ebcc-17cb-416b-a5b2-d77af0716103","method":"GET","path":"/maas-api/v1/api-keys/a15923e2-a51f-485c-98fb-84843b771a61","host":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b79ebcc-17cb-416b-a5b2-d77af0716103","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37462","PortSpecifier":{"PortValue":37462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075380,"nanos":738437616},"http":{"id":"3b79ebcc-17cb-416b-a5b2-d77af0716103","method":"GET","headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a15923e2-a51f-485c-98fb-84843b771a61",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3b79ebcc-17cb-416b-a5b2-d77af0716103","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b79ebcc-17cb-416b-a5b2-d77af0716103","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b79ebcc-17cb-416b-a5b2-d77af0716103","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a15923e2-a51f-485c-98fb-84843b771a61",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b79ebcc-17cb-416b-a5b2-d77af0716103","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b79ebcc-17cb-416b-a5b2-d77af0716103","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b79ebcc-17cb-416b-a5b2-d77af0716103","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-62c45e/auth-test-model-62c45e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b79ebcc-17cb-416b-a5b2-d77af0716103","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b79ebcc-17cb-416b-a5b2-d77af0716103","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b79ebcc-17cb-416b-a5b2-d77af0716103","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b79ebcc-17cb-416b-a5b2-d77af0716103","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b79ebcc-17cb-416b-a5b2-d77af0716103","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c44e13f-7350-481e-b739-75e00dd1d8ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34694","PortSpecifier":{"PortValue":34694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c44e13f-7350-481e-b739-75e00dd1d8ee","method":"GET","path":"/maas-api/v1/api-keys/a15923e2-a51f-485c-98fb-84843b771a61","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c44e13f-7350-481e-b739-75e00dd1d8ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34694","PortSpecifier":{"PortValue":34694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075380,"nanos":773124983},"http":{"id":"2c44e13f-7350-481e-b739-75e00dd1d8ee","method":"GET","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a15923e2-a51f-485c-98fb-84843b771a61",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c44e13f-7350-481e-b739-75e00dd1d8ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c44e13f-7350-481e-b739-75e00dd1d8ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c44e13f-7350-481e-b739-75e00dd1d8ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a15923e2-a51f-485c-98fb-84843b771a61",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c44e13f-7350-481e-b739-75e00dd1d8ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c44e13f-7350-481e-b739-75e00dd1d8ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c44e13f-7350-481e-b739-75e00dd1d8ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/auth-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c44e13f-7350-481e-b739-75e00dd1d8ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c44e13f-7350-481e-b739-75e00dd1d8ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c44e13f-7350-481e-b739-75e00dd1d8ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c44e13f-7350-481e-b739-75e00dd1d8ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:43:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c44e13f-7350-481e-b739-75e00dd1d8ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d8908cc-e84c-4453-8a3b-8d3dbd664e05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44898","PortSpecifier":{"PortValue":44898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d8908cc-e84c-4453-8a3b-8d3dbd664e05","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d8908cc-e84c-4453-8a3b-8d3dbd664e05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44898","PortSpecifier":{"PortValue":44898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075397,"nanos":889903984},"http":{"id":"0d8908cc-e84c-4453-8a3b-8d3dbd664e05","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d8908cc-e84c-4453-8a3b-8d3dbd664e05","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d8908cc-e84c-4453-8a3b-8d3dbd664e05","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d8908cc-e84c-4453-8a3b-8d3dbd664e05","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d8908cc-e84c-4453-8a3b-8d3dbd664e05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d8908cc-e84c-4453-8a3b-8d3dbd664e05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d8908cc-e84c-4453-8a3b-8d3dbd664e05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/auth-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d8908cc-e84c-4453-8a3b-8d3dbd664e05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d8908cc-e84c-4453-8a3b-8d3dbd664e05","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d8908cc-e84c-4453-8a3b-8d3dbd664e05","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d8908cc-e84c-4453-8a3b-8d3dbd664e05","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d8908cc-e84c-4453-8a3b-8d3dbd664e05","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d8db9e1-a0b6-4e13-8789-33de9c13106b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39354","PortSpecifier":{"PortValue":39354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d8db9e1-a0b6-4e13-8789-33de9c13106b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d8db9e1-a0b6-4e13-8789-33de9c13106b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39354","PortSpecifier":{"PortValue":39354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075397,"nanos":926856006},"http":{"id":"1d8db9e1-a0b6-4e13-8789-33de9c13106b","method":"POST","headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1d8db9e1-a0b6-4e13-8789-33de9c13106b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d8db9e1-a0b6-4e13-8789-33de9c13106b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d8db9e1-a0b6-4e13-8789-33de9c13106b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d8db9e1-a0b6-4e13-8789-33de9c13106b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d8db9e1-a0b6-4e13-8789-33de9c13106b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d8db9e1-a0b6-4e13-8789-33de9c13106b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-62c45e/auth-test-model-62c45e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d8db9e1-a0b6-4e13-8789-33de9c13106b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d8db9e1-a0b6-4e13-8789-33de9c13106b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d8db9e1-a0b6-4e13-8789-33de9c13106b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d8db9e1-a0b6-4e13-8789-33de9c13106b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d8db9e1-a0b6-4e13-8789-33de9c13106b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32728504-0262-4fed-aa3b-dc9fc4f9cfe9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44904","PortSpecifier":{"PortValue":44904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32728504-0262-4fed-aa3b-dc9fc4f9cfe9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32728504-0262-4fed-aa3b-dc9fc4f9cfe9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44904","PortSpecifier":{"PortValue":44904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075397,"nanos":970715352},"http":{"id":"32728504-0262-4fed-aa3b-dc9fc4f9cfe9","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32728504-0262-4fed-aa3b-dc9fc4f9cfe9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Lf1FYEQiujhPzYK2_v1mJuIBSAhyMlH6hNmYL5sbEyaiqu1C1RTGFxBEbOFL"}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32728504-0262-4fed-aa3b-dc9fc4f9cfe9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Lf1FYEQiujhPzYK2_v1mJuIBSAhyMlH6hNmYL5sbEyaiqu1C1RTGFxBEbOFL\"}"}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32728504-0262-4fed-aa3b-dc9fc4f9cfe9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f25c2a23-6d5e-44c4-90b6-c53f3713bee2","keyName":"e2e-auth-iso-a-2c41af","subscription":"e2e-auth-iso-cef02f","tenant":"e2e-shared-a-cda536","userId":"f25c2a23-6d5e-44c4-90b6-c53f3713bee2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32728504-0262-4fed-aa3b-dc9fc4f9cfe9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32728504-0262-4fed-aa3b-dc9fc4f9cfe9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32728504-0262-4fed-aa3b-dc9fc4f9cfe9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32728504-0262-4fed-aa3b-dc9fc4f9cfe9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/auth-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32728504-0262-4fed-aa3b-dc9fc4f9cfe9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32728504-0262-4fed-aa3b-dc9fc4f9cfe9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32728504-0262-4fed-aa3b-dc9fc4f9cfe9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-cef02f"}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32728504-0262-4fed-aa3b-dc9fc4f9cfe9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32728504-0262-4fed-aa3b-dc9fc4f9cfe9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:43:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32728504-0262-4fed-aa3b-dc9fc4f9cfe9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:43:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4997cc27655b94e81822ea03eb8758711fe21803871d906d228ea61d8d0df9d"}
{"level":"info","ts":"2026-07-03T10:43:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09256e9d320c188e14e938b2d1b2a88b683ab7e32046a43e5986b98489e821d9"}
{"level":"info","ts":"2026-07-03T10:43:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d7974d6dd2f453aad97db969eab0a61660df0bd2948615b61d1779064684149"}
{"level":"info","ts":"2026-07-03T10:43:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65efe7a2d565a85735811b0e768cf70baf4e7025025ef1b9f4f448410b578593"}
{"level":"info","ts":"2026-07-03T10:43:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3834bd906cca54e7e4d96f1a1012e3b4a707007e099dbe0a4599456314496e1"}
{"level":"info","ts":"2026-07-03T10:43:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e1ef8a552c122ea9a9fa772f2bb91334dde8129eb71deb9df5e0bf894153731"}
{"level":"info","ts":"2026-07-03T10:43:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/085db43a3968208efc9c7468ffa621995f598c9087d4e13dc4183b5551d47f36"}
{"level":"info","ts":"2026-07-03T10:43:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0028a8f8eb14500c70c2903e4dd9c0175c1431ca0d523b660debdae5dbad7f7a"}
{"level":"debug","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"}
{"level":"info","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"}
{"level":"error","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"}
{"level":"debug","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"}
{"level":"debug","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"}
{"level":"debug","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"}
{"level":"info","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9"}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9"}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9"}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8"}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8"}
{"level":"error","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8"}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8"}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88"}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8"}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88"}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88"}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8"}
{"level":"info","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"998849d7d6732332cf438f4e7e326276136811316ec41f3b32df46557c214c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/998849d7d6732332cf438f4e7e326276136811316ec41f3b32df46557c214c39"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"998849d7d6732332cf438f4e7e326276136811316ec41f3b32df46557c214c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"998849d7d6732332cf438f4e7e326276136811316ec41f3b32df46557c214c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["998849d7d6732332cf438f4e7e326276136811316ec41f3b32df46557c214c39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"998849d7d6732332cf438f4e7e326276136811316ec41f3b32df46557c214c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/998849d7d6732332cf438f4e7e326276136811316ec41f3b32df46557c214c39"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8192385aa47819b7f74f465d5c83e9a6550ef736585972d4bae66a01cfa3f9a"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"998849d7d6732332cf438f4e7e326276136811316ec41f3b32df46557c214c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fac14724130c4b31648a2d2c96c9bbac59e3599d0c0d2f69fc92d3a2d98322bc"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/998849d7d6732332cf438f4e7e326276136811316ec41f3b32df46557c214c39"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f08424bd68c04e47e918954dfea311b604519c0d4d8fa44649bd93f874388c64"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3af14a03931d9a47836e5d2713d0cd982938058a01191598daaf66bc4e6efefb"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5248cf6a717bc68caf8746854c53cc5142b90b144a65ff904cc9a0458808052f"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/080dd48a5db57c707f9c5c4baf987d80df6001545c698a897a9d0bfd0360b343"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5e8f400dd10cf370bac8c949386955ecd378f1d1dcaf4bb0c18973a4acd156f"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c713d6c8a4f48794e83aa980f4ef8da6001dc573c230b3a94bebd80cd923a8a"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88"}
{"level":"info","ts":"2026-07-03T10:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8"}
{"level":"debug","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15"}
{"level":"debug","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15"}
{"level":"info","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15"}
{"level":"debug","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15"}
{"level":"debug","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15"}
{"level":"debug","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0421b81c00c8fea9382e8e3c201f2c8caa640c2a45ea490aed7f6aaa55eb0ff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0421b81c00c8fea9382e8e3c201f2c8caa640c2a45ea490aed7f6aaa55eb0ff3"}
{"level":"info","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0421b81c00c8fea9382e8e3c201f2c8caa640c2a45ea490aed7f6aaa55eb0ff3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0421b81c00c8fea9382e8e3c201f2c8caa640c2a45ea490aed7f6aaa55eb0ff3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0421b81c00c8fea9382e8e3c201f2c8caa640c2a45ea490aed7f6aaa55eb0ff3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0421b81c00c8fea9382e8e3c201f2c8caa640c2a45ea490aed7f6aaa55eb0ff3"}
{"level":"debug","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0421b81c00c8fea9382e8e3c201f2c8caa640c2a45ea490aed7f6aaa55eb0ff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:43:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:43:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0421b81c00c8fea9382e8e3c201f2c8caa640c2a45ea490aed7f6aaa55eb0ff3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0421b81c00c8fea9382e8e3c201f2c8caa640c2a45ea490aed7f6aaa55eb0ff3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0421b81c00c8fea9382e8e3c201f2c8caa640c2a45ea490aed7f6aaa55eb0ff3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0421b81c00c8fea9382e8e3c201f2c8caa640c2a45ea490aed7f6aaa55eb0ff3"}
{"level":"debug","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:43:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:43:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6"}
{"level":"debug","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:43:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6"}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6"}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb"}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6"}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb"}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6"}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb"}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb"}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6"}
{"level":"error","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb"}
{"level":"error","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb"}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea012ed0296a089e84afae2e942855548ec83dbfcb48c1609b4392e52e8e0774","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea012ed0296a089e84afae2e942855548ec83dbfcb48c1609b4392e52e8e0774"}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea012ed0296a089e84afae2e942855548ec83dbfcb48c1609b4392e52e8e0774","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea012ed0296a089e84afae2e942855548ec83dbfcb48c1609b4392e52e8e0774","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea012ed0296a089e84afae2e942855548ec83dbfcb48c1609b4392e52e8e0774"}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea012ed0296a089e84afae2e942855548ec83dbfcb48c1609b4392e52e8e0774","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea012ed0296a089e84afae2e942855548ec83dbfcb48c1609b4392e52e8e0774"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb"}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea012ed0296a089e84afae2e942855548ec83dbfcb48c1609b4392e52e8e0774","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea012ed0296a089e84afae2e942855548ec83dbfcb48c1609b4392e52e8e0774","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea012ed0296a089e84afae2e942855548ec83dbfcb48c1609b4392e52e8e0774"}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671"}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671"}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01ff7a762b2099094424986ff4d6b970166c38621055a77ca212145509479ccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01ff7a762b2099094424986ff4d6b970166c38621055a77ca212145509479ccd"}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01ff7a762b2099094424986ff4d6b970166c38621055a77ca212145509479ccd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671"}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01ff7a762b2099094424986ff4d6b970166c38621055a77ca212145509479ccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01ff7a762b2099094424986ff4d6b970166c38621055a77ca212145509479ccd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274"}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01ff7a762b2099094424986ff4d6b970166c38621055a77ca212145509479ccd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01ff7a762b2099094424986ff4d6b970166c38621055a77ca212145509479ccd"}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01ff7a762b2099094424986ff4d6b970166c38621055a77ca212145509479ccd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671"}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274"}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01ff7a762b2099094424986ff4d6b970166c38621055a77ca212145509479ccd"}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671"}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274"}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671"}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274"}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274"}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274"}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274"}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274"}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3"}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274"}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3"}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274"}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6"}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274"}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3"}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6"}
{"level":"info","ts":"2026-07-03T10:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9"}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0"}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9"}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0"}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0"}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"}
{"level":"error","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb"}
{"level":"error","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0421b81c00c8fea9382e8e3c201f2c8caa640c2a45ea490aed7f6aaa55eb0ff3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0421b81c00c8fea9382e8e3c201f2c8caa640c2a45ea490aed7f6aaa55eb0ff3"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22dece0f641f1badb084d71e3504651b5924bed19bb77e73b8bd0f28d5a15aa5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22dece0f641f1badb084d71e3504651b5924bed19bb77e73b8bd0f28d5a15aa5"}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01ff7a762b2099094424986ff4d6b970166c38621055a77ca212145509479ccd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01ff7a762b2099094424986ff4d6b970166c38621055a77ca212145509479ccd"}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"}
{"level":"debug","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea012ed0296a089e84afae2e942855548ec83dbfcb48c1609b4392e52e8e0774","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2"}
{"level":"debug","ts":"2026-07-03T10:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"998849d7d6732332cf438f4e7e326276136811316ec41f3b32df46557c214c39","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea012ed0296a089e84afae2e942855548ec83dbfcb48c1609b4392e52e8e0774"}
{"level":"info","ts":"2026-07-03T10:44:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/998849d7d6732332cf438f4e7e326276136811316ec41f3b32df46557c214c39"}
{"level":"info","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40bd5c61-a233-43d0-ba6b-654bb6ef55f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46802","PortSpecifier":{"PortValue":46802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40bd5c61-a233-43d0-ba6b-654bb6ef55f4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40bd5c61-a233-43d0-ba6b-654bb6ef55f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46802","PortSpecifier":{"PortValue":46802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075464,"nanos":42145136},"http":{"id":"40bd5c61-a233-43d0-ba6b-654bb6ef55f4","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"40bd5c61-a233-43d0-ba6b-654bb6ef55f4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40bd5c61-a233-43d0-ba6b-654bb6ef55f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40bd5c61-a233-43d0-ba6b-654bb6ef55f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40bd5c61-a233-43d0-ba6b-654bb6ef55f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40bd5c61-a233-43d0-ba6b-654bb6ef55f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40bd5c61-a233-43d0-ba6b-654bb6ef55f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/sub-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"40bd5c61-a233-43d0-ba6b-654bb6ef55f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40bd5c61-a233-43d0-ba6b-654bb6ef55f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40bd5c61-a233-43d0-ba6b-654bb6ef55f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40bd5c61-a233-43d0-ba6b-654bb6ef55f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40bd5c61-a233-43d0-ba6b-654bb6ef55f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1f48e19-34b6-4895-9cbb-4b26a1114014","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58002","PortSpecifier":{"PortValue":58002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1f48e19-34b6-4895-9cbb-4b26a1114014","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1f48e19-34b6-4895-9cbb-4b26a1114014","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58002","PortSpecifier":{"PortValue":58002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075464,"nanos":83982391},"http":{"id":"d1f48e19-34b6-4895-9cbb-4b26a1114014","method":"POST","headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d1f48e19-34b6-4895-9cbb-4b26a1114014","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1f48e19-34b6-4895-9cbb-4b26a1114014","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1f48e19-34b6-4895-9cbb-4b26a1114014","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1f48e19-34b6-4895-9cbb-4b26a1114014","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1f48e19-34b6-4895-9cbb-4b26a1114014","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1f48e19-34b6-4895-9cbb-4b26a1114014","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-62c45e/sub-test-model-62c45e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d1f48e19-34b6-4895-9cbb-4b26a1114014","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1f48e19-34b6-4895-9cbb-4b26a1114014","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1f48e19-34b6-4895-9cbb-4b26a1114014","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1f48e19-34b6-4895-9cbb-4b26a1114014","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1f48e19-34b6-4895-9cbb-4b26a1114014","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c3b343d-4c8c-4b33-8693-d855b840318a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46816","PortSpecifier":{"PortValue":46816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c3b343d-4c8c-4b33-8693-d855b840318a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c3b343d-4c8c-4b33-8693-d855b840318a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46816","PortSpecifier":{"PortValue":46816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075464,"nanos":131304840},"http":{"id":"3c3b343d-4c8c-4b33-8693-d855b840318a","method":"GET","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c3b343d-4c8c-4b33-8693-d855b840318a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NSjFoGkP5gzvtxV2_3B8iv5oUjVMB6XVZnK8b4LvThoQTgLFD7pgOwMlgAly"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c3b343d-4c8c-4b33-8693-d855b840318a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NSjFoGkP5gzvtxV2_3B8iv5oUjVMB6XVZnK8b4LvThoQTgLFD7pgOwMlgAly\"}"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c3b343d-4c8c-4b33-8693-d855b840318a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be786869-79c1-4642-8287-b1ea21e83e91","keyName":"e2e-sub-iso-eb0b37","subscription":"e2e-a-only-8b6a54","tenant":"e2e-shared-a-cda536","userId":"be786869-79c1-4642-8287-b1ea21e83e91","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c3b343d-4c8c-4b33-8693-d855b840318a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c3b343d-4c8c-4b33-8693-d855b840318a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c3b343d-4c8c-4b33-8693-d855b840318a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c3b343d-4c8c-4b33-8693-d855b840318a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/sub-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c3b343d-4c8c-4b33-8693-d855b840318a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c3b343d-4c8c-4b33-8693-d855b840318a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-8b6a54"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c3b343d-4c8c-4b33-8693-d855b840318a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3c3b343d-4c8c-4b33-8693-d855b840318a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c3b343d-4c8c-4b33-8693-d855b840318a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c3b343d-4c8c-4b33-8693-d855b840318a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab332d29-6ae3-42bb-b781-999f24e99066","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58008","PortSpecifier":{"PortValue":58008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab332d29-6ae3-42bb-b781-999f24e99066","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab332d29-6ae3-42bb-b781-999f24e99066","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58008","PortSpecifier":{"PortValue":58008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075464,"nanos":167637333},"http":{"id":"ab332d29-6ae3-42bb-b781-999f24e99066","method":"GET","headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab332d29-6ae3-42bb-b781-999f24e99066","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1atCy4mADK4RsZVwn_4ZiOURV7jZ4y1RHHG9gFIrnhHFwN7L5oKHRZdEwl94J"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab332d29-6ae3-42bb-b781-999f24e99066","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-62c45e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1atCy4mADK4RsZVwn_4ZiOURV7jZ4y1RHHG9gFIrnhHFwN7L5oKHRZdEwl94J\"}"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab332d29-6ae3-42bb-b781-999f24e99066","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-62c45e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d6d661f8-e98b-487b-88a0-a49889d6b5b8","keyName":"e2e-sub-iso-384456","subscription":"e2e-b-only-8b6a54","tenant":"e2e-shared-b-62c45e","userId":"d6d661f8-e98b-487b-88a0-a49889d6b5b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab332d29-6ae3-42bb-b781-999f24e99066","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab332d29-6ae3-42bb-b781-999f24e99066","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab332d29-6ae3-42bb-b781-999f24e99066","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab332d29-6ae3-42bb-b781-999f24e99066","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-62c45e/sub-test-model-62c45e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ab332d29-6ae3-42bb-b781-999f24e99066","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab332d29-6ae3-42bb-b781-999f24e99066","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab332d29-6ae3-42bb-b781-999f24e99066","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-8b6a54"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab332d29-6ae3-42bb-b781-999f24e99066","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab332d29-6ae3-42bb-b781-999f24e99066","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab332d29-6ae3-42bb-b781-999f24e99066","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87457d16-80c4-424a-b501-3879a18d0e9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60852","PortSpecifier":{"PortValue":60852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87457d16-80c4-424a-b501-3879a18d0e9c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87457d16-80c4-424a-b501-3879a18d0e9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60852","PortSpecifier":{"PortValue":60852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075476,"nanos":373320823},"http":{"id":"87457d16-80c4-424a-b501-3879a18d0e9c","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87457d16-80c4-424a-b501-3879a18d0e9c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87457d16-80c4-424a-b501-3879a18d0e9c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87457d16-80c4-424a-b501-3879a18d0e9c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87457d16-80c4-424a-b501-3879a18d0e9c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87457d16-80c4-424a-b501-3879a18d0e9c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87457d16-80c4-424a-b501-3879a18d0e9c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/sub-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87457d16-80c4-424a-b501-3879a18d0e9c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87457d16-80c4-424a-b501-3879a18d0e9c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87457d16-80c4-424a-b501-3879a18d0e9c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87457d16-80c4-424a-b501-3879a18d0e9c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87457d16-80c4-424a-b501-3879a18d0e9c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6da8f269-c30c-4c4f-bb80-513370a0d58c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41928","PortSpecifier":{"PortValue":41928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6da8f269-c30c-4c4f-bb80-513370a0d58c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6da8f269-c30c-4c4f-bb80-513370a0d58c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41928","PortSpecifier":{"PortValue":41928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075476,"nanos":417905345},"http":{"id":"6da8f269-c30c-4c4f-bb80-513370a0d58c","method":"POST","headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6da8f269-c30c-4c4f-bb80-513370a0d58c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6da8f269-c30c-4c4f-bb80-513370a0d58c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6da8f269-c30c-4c4f-bb80-513370a0d58c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6da8f269-c30c-4c4f-bb80-513370a0d58c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6da8f269-c30c-4c4f-bb80-513370a0d58c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6da8f269-c30c-4c4f-bb80-513370a0d58c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-62c45e/sub-test-model-62c45e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6da8f269-c30c-4c4f-bb80-513370a0d58c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6da8f269-c30c-4c4f-bb80-513370a0d58c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6da8f269-c30c-4c4f-bb80-513370a0d58c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6da8f269-c30c-4c4f-bb80-513370a0d58c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6da8f269-c30c-4c4f-bb80-513370a0d58c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7822a446-b1af-439f-8dd2-a482c4f93fcc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60860","PortSpecifier":{"PortValue":60860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7822a446-b1af-439f-8dd2-a482c4f93fcc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7822a446-b1af-439f-8dd2-a482c4f93fcc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60860","PortSpecifier":{"PortValue":60860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075476,"nanos":458717877},"http":{"id":"7822a446-b1af-439f-8dd2-a482c4f93fcc","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7822a446-b1af-439f-8dd2-a482c4f93fcc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TKCeGe5JbB2y1Rtf_smqU6Qvq6po7S169XejwrZR3l0HRiJW6VYpwoMzpHYU"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7822a446-b1af-439f-8dd2-a482c4f93fcc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TKCeGe5JbB2y1Rtf_smqU6Qvq6po7S169XejwrZR3l0HRiJW6VYpwoMzpHYU\"}"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7822a446-b1af-439f-8dd2-a482c4f93fcc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e63b3dfd-93b0-448c-961e-6e0788bc0603","keyName":"e2e-sub-iso-469aea","subscription":"e2e-shared-sub-2c7c12","tenant":"e2e-shared-a-cda536","userId":"e63b3dfd-93b0-448c-961e-6e0788bc0603","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7822a446-b1af-439f-8dd2-a482c4f93fcc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7822a446-b1af-439f-8dd2-a482c4f93fcc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7822a446-b1af-439f-8dd2-a482c4f93fcc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7822a446-b1af-439f-8dd2-a482c4f93fcc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/sub-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7822a446-b1af-439f-8dd2-a482c4f93fcc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7822a446-b1af-439f-8dd2-a482c4f93fcc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7822a446-b1af-439f-8dd2-a482c4f93fcc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-2c7c12"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7822a446-b1af-439f-8dd2-a482c4f93fcc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7822a446-b1af-439f-8dd2-a482c4f93fcc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7822a446-b1af-439f-8dd2-a482c4f93fcc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7970adc1-5815-4ae5-ada9-4172f454a8a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41936","PortSpecifier":{"PortValue":41936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7970adc1-5815-4ae5-ada9-4172f454a8a9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7970adc1-5815-4ae5-ada9-4172f454a8a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41936","PortSpecifier":{"PortValue":41936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075476,"nanos":490661242},"http":{"id":"7970adc1-5815-4ae5-ada9-4172f454a8a9","method":"POST","headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7970adc1-5815-4ae5-ada9-4172f454a8a9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-P8FYr6mCAV34xbBe_RbkoWCEj3vV5E7RvIipLXaHEkqYbfZQgubiXDJoeGW"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7970adc1-5815-4ae5-ada9-4172f454a8a9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-62c45e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-P8FYr6mCAV34xbBe_RbkoWCEj3vV5E7RvIipLXaHEkqYbfZQgubiXDJoeGW\"}"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7970adc1-5815-4ae5-ada9-4172f454a8a9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-62c45e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cec4f791-e4b0-45aa-a394-6f127f366044","keyName":"e2e-sub-iso-8b3e72","subscription":"e2e-shared-sub-2c7c12","tenant":"e2e-shared-b-62c45e","userId":"cec4f791-e4b0-45aa-a394-6f127f366044","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7970adc1-5815-4ae5-ada9-4172f454a8a9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7970adc1-5815-4ae5-ada9-4172f454a8a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7970adc1-5815-4ae5-ada9-4172f454a8a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7970adc1-5815-4ae5-ada9-4172f454a8a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-62c45e/sub-test-model-62c45e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7970adc1-5815-4ae5-ada9-4172f454a8a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7970adc1-5815-4ae5-ada9-4172f454a8a9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-2c7c12"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7970adc1-5815-4ae5-ada9-4172f454a8a9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7970adc1-5815-4ae5-ada9-4172f454a8a9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7970adc1-5815-4ae5-ada9-4172f454a8a9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:44:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7970adc1-5815-4ae5-ada9-4172f454a8a9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/590d4f8848d99e1fbb61c545c5c417d31a1de3be7c411f769b6f27e79a6a1922"}
{"level":"info","ts":"2026-07-03T10:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/917c17d0f64df5c2e1f6eafa240a3e0fc3d210e9e292be9bf7cb3fbc7f0e23a9"}
{"level":"info","ts":"2026-07-03T10:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b282ac7b5075ca2acc3d1a91d33df6f9a20efe1df830d735270bf6f069e2cde8"}
{"level":"info","ts":"2026-07-03T10:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b1592af6adca5f08fa2bb062d5b299758411f292ac3cceb413f234742b326f0"}
{"level":"info","ts":"2026-07-03T10:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90845f0def8bf89015021721edc2a6e76ac6588715b2bfea7b3792fced74fa88"}
{"level":"info","ts":"2026-07-03T10:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d50e119678e82cc304291719a7ae3a7b5839a711b5e51ce0ddfcd68e94cb44d2"}
{"level":"info","ts":"2026-07-03T10:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/998849d7d6732332cf438f4e7e326276136811316ec41f3b32df46557c214c39"}
{"level":"info","ts":"2026-07-03T10:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5dee89276d780aafd4fce93089d79ddd6ab6e4f39e10272b47df598419cfec7"}
{"level":"info","ts":"2026-07-03T10:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0421b81c00c8fea9382e8e3c201f2c8caa640c2a45ea490aed7f6aaa55eb0ff3"}
{"level":"info","ts":"2026-07-03T10:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01ff7a762b2099094424986ff4d6b970166c38621055a77ca212145509479ccd"}
{"level":"info","ts":"2026-07-03T10:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f9c09f89eace8a5c18b9af05cb123494a413f0cb0e704428dd680a1d30c85e6"}
{"level":"info","ts":"2026-07-03T10:44:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fab2c9cd8b03636abe793ed311036c48190a2f31ad4ba6e274dc14b1f898e671"}
{"level":"info","ts":"2026-07-03T10:44:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea012ed0296a089e84afae2e942855548ec83dbfcb48c1609b4392e52e8e0774"}
{"level":"info","ts":"2026-07-03T10:44:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2283b6cfbc785801c5ae82a8b407207b66e3235bf56d766d0decd58a71b44bcb"}
{"level":"info","ts":"2026-07-03T10:44:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0788600700b546233c1514fdcfb31311ed10b4fc83a960a5fb7b06428b136274"}
{"level":"info","ts":"2026-07-03T10:44:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2012fa5d3053e13de94ba573118c0d90631a411d8f3ac31ea6c4fead8b4f8e15"}
{"level":"debug","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d751eef71f69fbfdf22caea49dfe14c0f5545f56232a681c01b5d6cce8c0feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d751eef71f69fbfdf22caea49dfe14c0f5545f56232a681c01b5d6cce8c0feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d751eef71f69fbfdf22caea49dfe14c0f5545f56232a681c01b5d6cce8c0feb"}
{"level":"info","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d751eef71f69fbfdf22caea49dfe14c0f5545f56232a681c01b5d6cce8c0feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d751eef71f69fbfdf22caea49dfe14c0f5545f56232a681c01b5d6cce8c0feb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d751eef71f69fbfdf22caea49dfe14c0f5545f56232a681c01b5d6cce8c0feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea"}
{"level":"info","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d751eef71f69fbfdf22caea49dfe14c0f5545f56232a681c01b5d6cce8c0feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d751eef71f69fbfdf22caea49dfe14c0f5545f56232a681c01b5d6cce8c0feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d751eef71f69fbfdf22caea49dfe14c0f5545f56232a681c01b5d6cce8c0feb"}
{"level":"info","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d751eef71f69fbfdf22caea49dfe14c0f5545f56232a681c01b5d6cce8c0feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d751eef71f69fbfdf22caea49dfe14c0f5545f56232a681c01b5d6cce8c0feb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d751eef71f69fbfdf22caea49dfe14c0f5545f56232a681c01b5d6cce8c0feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d751eef71f69fbfdf22caea49dfe14c0f5545f56232a681c01b5d6cce8c0feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea"}
{"level":"debug","ts":"2026-07-03T10:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d751eef71f69fbfdf22caea49dfe14c0f5545f56232a681c01b5d6cce8c0feb"}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea"}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a"}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a"}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a"}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca"}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a"}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca"}
{"level":"error","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a"}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca"}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a"}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca"}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca"}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a"}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537"}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca"}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537"}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6"}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6"}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4"}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6"}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4"}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc"}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4"}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc"}
{"level":"error","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4"}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc"}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc"}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:44:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:44:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc"}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6"}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6"}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6"}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6"}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6"}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6"}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6"}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"}
{"level":"debug","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"055aff542cbf37223cf84bd584b06a4b742bee808c90c0b3624fcbdeec4850d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"055aff542cbf37223cf84bd584b06a4b742bee808c90c0b3624fcbdeec4850d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"055aff542cbf37223cf84bd584b06a4b742bee808c90c0b3624fcbdeec4850d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"055aff542cbf37223cf84bd584b06a4b742bee808c90c0b3624fcbdeec4850d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"055aff542cbf37223cf84bd584b06a4b742bee808c90c0b3624fcbdeec4850d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/055aff542cbf37223cf84bd584b06a4b742bee808c90c0b3624fcbdeec4850d2"}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"055aff542cbf37223cf84bd584b06a4b742bee808c90c0b3624fcbdeec4850d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"055aff542cbf37223cf84bd584b06a4b742bee808c90c0b3624fcbdeec4850d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/055aff542cbf37223cf84bd584b06a4b742bee808c90c0b3624fcbdeec4850d2"}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"055aff542cbf37223cf84bd584b06a4b742bee808c90c0b3624fcbdeec4850d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["055aff542cbf37223cf84bd584b06a4b742bee808c90c0b3624fcbdeec4850d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"055aff542cbf37223cf84bd584b06a4b742bee808c90c0b3624fcbdeec4850d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2"}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/055aff542cbf37223cf84bd584b06a4b742bee808c90c0b3624fcbdeec4850d2"}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"055aff542cbf37223cf84bd584b06a4b742bee808c90c0b3624fcbdeec4850d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2"}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2"}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2"}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2"}
{"level":"error","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"}
{"level":"error","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428"}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428"}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5163d452d8a76d2b3709bcd83d4a665765c505ba2a6e82e6e858e4548878aa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5163d452d8a76d2b3709bcd83d4a665765c505ba2a6e82e6e858e4548878aa5"}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5163d452d8a76d2b3709bcd83d4a665765c505ba2a6e82e6e858e4548878aa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5163d452d8a76d2b3709bcd83d4a665765c505ba2a6e82e6e858e4548878aa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5163d452d8a76d2b3709bcd83d4a665765c505ba2a6e82e6e858e4548878aa5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5163d452d8a76d2b3709bcd83d4a665765c505ba2a6e82e6e858e4548878aa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5163d452d8a76d2b3709bcd83d4a665765c505ba2a6e82e6e858e4548878aa5"}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5163d452d8a76d2b3709bcd83d4a665765c505ba2a6e82e6e858e4548878aa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5163d452d8a76d2b3709bcd83d4a665765c505ba2a6e82e6e858e4548878aa5"}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"}
{"level":"debug","ts":"2026-07-03T10:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d751eef71f69fbfdf22caea49dfe14c0f5545f56232a681c01b5d6cce8c0feb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d751eef71f69fbfdf22caea49dfe14c0f5545f56232a681c01b5d6cce8c0feb"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3"}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22dece0f641f1badb084d71e3504651b5924bed19bb77e73b8bd0f28d5a15aa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"055aff542cbf37223cf84bd584b06a4b742bee808c90c0b3624fcbdeec4850d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22dece0f641f1badb084d71e3504651b5924bed19bb77e73b8bd0f28d5a15aa5"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a"}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/055aff542cbf37223cf84bd584b06a4b742bee808c90c0b3624fcbdeec4850d2"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5163d452d8a76d2b3709bcd83d4a665765c505ba2a6e82e6e858e4548878aa5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5163d452d8a76d2b3709bcd83d4a665765c505ba2a6e82e6e858e4548878aa5"}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537"}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537"}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6"}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6"}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537"}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428"}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6"}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea"}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537"}
{"level":"info","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T10:45:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428"}
{"level":"debug","ts":"2026-07-03T10:45:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T10:45:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T10:45:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T10:45:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T10:45:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T10:45:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6"}
{"level":"info","ts":"2026-07-03T10:45:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428"}
{"level":"info","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97585a2f-4eff-4830-8905-cf58ff2e42ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52904","PortSpecifier":{"PortValue":52904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97585a2f-4eff-4830-8905-cf58ff2e42ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97585a2f-4eff-4830-8905-cf58ff2e42ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52904","PortSpecifier":{"PortValue":52904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075539,"nanos":32135404},"http":{"id":"97585a2f-4eff-4830-8905-cf58ff2e42ab","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"97585a2f-4eff-4830-8905-cf58ff2e42ab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97585a2f-4eff-4830-8905-cf58ff2e42ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97585a2f-4eff-4830-8905-cf58ff2e42ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97585a2f-4eff-4830-8905-cf58ff2e42ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97585a2f-4eff-4830-8905-cf58ff2e42ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97585a2f-4eff-4830-8905-cf58ff2e42ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"97585a2f-4eff-4830-8905-cf58ff2e42ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97585a2f-4eff-4830-8905-cf58ff2e42ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97585a2f-4eff-4830-8905-cf58ff2e42ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97585a2f-4eff-4830-8905-cf58ff2e42ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97585a2f-4eff-4830-8905-cf58ff2e42ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66397bab-6837-418e-9662-123aa54435fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51798","PortSpecifier":{"PortValue":51798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66397bab-6837-418e-9662-123aa54435fe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66397bab-6837-418e-9662-123aa54435fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51798","PortSpecifier":{"PortValue":51798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075539,"nanos":75438746},"http":{"id":"66397bab-6837-418e-9662-123aa54435fe","method":"POST","headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66397bab-6837-418e-9662-123aa54435fe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66397bab-6837-418e-9662-123aa54435fe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66397bab-6837-418e-9662-123aa54435fe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66397bab-6837-418e-9662-123aa54435fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66397bab-6837-418e-9662-123aa54435fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66397bab-6837-418e-9662-123aa54435fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-62c45e/rate-test-model-62c45e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66397bab-6837-418e-9662-123aa54435fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66397bab-6837-418e-9662-123aa54435fe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66397bab-6837-418e-9662-123aa54435fe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66397bab-6837-418e-9662-123aa54435fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66397bab-6837-418e-9662-123aa54435fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad594182-e477-4c9e-b560-7699795a6a86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52914","PortSpecifier":{"PortValue":52914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad594182-e477-4c9e-b560-7699795a6a86","method":"POST","path":"/ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536/v1/completions","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad594182-e477-4c9e-b560-7699795a6a86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52914","PortSpecifier":{"PortValue":52914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075539,"nanos":124960118},"http":{"id":"ad594182-e477-4c9e-b560-7699795a6a86","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad594182-e477-4c9e-b560-7699795a6a86","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GLk5RHsrHOp3YM0N_lE2yYSO3VSSTGI468VJHKM2TPFiZecvre2gKLazvjIP"}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad594182-e477-4c9e-b560-7699795a6a86","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GLk5RHsrHOp3YM0N_lE2yYSO3VSSTGI468VJHKM2TPFiZecvre2gKLazvjIP\"}"}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad594182-e477-4c9e-b560-7699795a6a86","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"21530aa3-81cd-4b5d-9ef3-4d350c85709f","keyName":"e2e-rate-a-f8e79a","subscription":"e2e-rate-iso-a-f8e79a","tenant":"e2e-shared-a-cda536","userId":"21530aa3-81cd-4b5d-9ef3-4d350c85709f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad594182-e477-4c9e-b560-7699795a6a86","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536\",\"requestedSubscription\":\"e2e-rate-iso-a-f8e79a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad594182-e477-4c9e-b560-7699795a6a86","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cda536","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f8e79a","namespace":"ai-tenant-e2e-shared-a-cda536","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad594182-e477-4c9e-b560-7699795a6a86","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad594182-e477-4c9e-b560-7699795a6a86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad594182-e477-4c9e-b560-7699795a6a86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad594182-e477-4c9e-b560-7699795a6a86","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad594182-e477-4c9e-b560-7699795a6a86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad594182-e477-4c9e-b560-7699795a6a86","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad594182-e477-4c9e-b560-7699795a6a86","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f8e79a"}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad594182-e477-4c9e-b560-7699795a6a86","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad594182-e477-4c9e-b560-7699795a6a86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"21530aa3-81cd-4b5d-9ef3-4d350c85709f","keyName":"e2e-rate-a-f8e79a","selected_subscription":"e2e-rate-iso-a-f8e79a","selected_subscription_key":"ai-tenant-e2e-shared-a-cda536/e2e-rate-iso-a-f8e79a@ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cda536","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f8e79a","namespace":"ai-tenant-e2e-shared-a-cda536","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad594182-e477-4c9e-b560-7699795a6a86","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:45:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad594182-e477-4c9e-b560-7699795a6a86","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52916","PortSpecifier":{"PortValue":52916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","method":"POST","path":"/ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536/v1/completions","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52916","PortSpecifier":{"PortValue":52916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075540,"nanos":186624222},"http":{"id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GLk5RHsrHOp3YM0N_lE2yYSO3VSSTGI468VJHKM2TPFiZecvre2gKLazvjIP"}
{"level":"debug","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GLk5RHsrHOp3YM0N_lE2yYSO3VSSTGI468VJHKM2TPFiZecvre2gKLazvjIP\"}"}
{"level":"debug","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"21530aa3-81cd-4b5d-9ef3-4d350c85709f","keyName":"e2e-rate-a-f8e79a","subscription":"e2e-rate-iso-a-f8e79a","tenant":"e2e-shared-a-cda536","userId":"21530aa3-81cd-4b5d-9ef3-4d350c85709f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536\",\"requestedSubscription\":\"e2e-rate-iso-a-f8e79a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cda536","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f8e79a","namespace":"ai-tenant-e2e-shared-a-cda536","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f8e79a"}
{"level":"debug","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"21530aa3-81cd-4b5d-9ef3-4d350c85709f","keyName":"e2e-rate-a-f8e79a","selected_subscription":"e2e-rate-iso-a-f8e79a","selected_subscription_key":"ai-tenant-e2e-shared-a-cda536/e2e-rate-iso-a-f8e79a@ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cda536","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f8e79a","namespace":"ai-tenant-e2e-shared-a-cda536","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:45:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84e010b7-9a87-48a6-8a8e-b9e0239cb46f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33420","PortSpecifier":{"PortValue":33420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","method":"POST","path":"/ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536/v1/completions","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33420","PortSpecifier":{"PortValue":33420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075541,"nanos":223619115},"http":{"id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GLk5RHsrHOp3YM0N_lE2yYSO3VSSTGI468VJHKM2TPFiZecvre2gKLazvjIP"}
{"level":"debug","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GLk5RHsrHOp3YM0N_lE2yYSO3VSSTGI468VJHKM2TPFiZecvre2gKLazvjIP\"}"}
{"level":"debug","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"21530aa3-81cd-4b5d-9ef3-4d350c85709f","keyName":"e2e-rate-a-f8e79a","subscription":"e2e-rate-iso-a-f8e79a","tenant":"e2e-shared-a-cda536","userId":"21530aa3-81cd-4b5d-9ef3-4d350c85709f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536\",\"requestedSubscription\":\"e2e-rate-iso-a-f8e79a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cda536","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f8e79a","namespace":"ai-tenant-e2e-shared-a-cda536","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f8e79a"}
{"level":"debug","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"21530aa3-81cd-4b5d-9ef3-4d350c85709f","keyName":"e2e-rate-a-f8e79a","selected_subscription":"e2e-rate-iso-a-f8e79a","selected_subscription_key":"ai-tenant-e2e-shared-a-cda536/e2e-rate-iso-a-f8e79a@ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cda536","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f8e79a","namespace":"ai-tenant-e2e-shared-a-cda536","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:45:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bcf270a-f27e-46d1-92ef-5aefa7ef0287","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:45:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e2e968c-0c79-4289-83f6-029750c698db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49336","PortSpecifier":{"PortValue":49336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e2e968c-0c79-4289-83f6-029750c698db","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:45:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e2e968c-0c79-4289-83f6-029750c698db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49336","PortSpecifier":{"PortValue":49336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075551,"nanos":959568773},"http":{"id":"6e2e968c-0c79-4289-83f6-029750c698db","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6e2e968c-0c79-4289-83f6-029750c698db","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:45:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e2e968c-0c79-4289-83f6-029750c698db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e2e968c-0c79-4289-83f6-029750c698db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e2e968c-0c79-4289-83f6-029750c698db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e2e968c-0c79-4289-83f6-029750c698db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e2e968c-0c79-4289-83f6-029750c698db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6e2e968c-0c79-4289-83f6-029750c698db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e2e968c-0c79-4289-83f6-029750c698db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e2e968c-0c79-4289-83f6-029750c698db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:45:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e2e968c-0c79-4289-83f6-029750c698db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:45:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e2e968c-0c79-4289-83f6-029750c698db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f448582a-395a-4003-8805-3719b718112c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49308","PortSpecifier":{"PortValue":49308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f448582a-395a-4003-8805-3719b718112c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f448582a-395a-4003-8805-3719b718112c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49308","PortSpecifier":{"PortValue":49308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075552,"nanos":2958699},"http":{"id":"f448582a-395a-4003-8805-3719b718112c","method":"POST","headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f448582a-395a-4003-8805-3719b718112c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f448582a-395a-4003-8805-3719b718112c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"]}}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f448582a-395a-4003-8805-3719b718112c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c92b748eca84"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c2c61159-5773-4fad-b777-9128354caeb0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e2464e6-4a01-4ff0-bde0-0f63679efcd1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f448582a-395a-4003-8805-3719b718112c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f448582a-395a-4003-8805-3719b718112c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f448582a-395a-4003-8805-3719b718112c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-62c45e/rate-test-model-62c45e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f448582a-395a-4003-8805-3719b718112c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f448582a-395a-4003-8805-3719b718112c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f448582a-395a-4003-8805-3719b718112c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f448582a-395a-4003-8805-3719b718112c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f448582a-395a-4003-8805-3719b718112c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49340","PortSpecifier":{"PortValue":49340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","method":"POST","path":"/ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536/v1/completions","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49340","PortSpecifier":{"PortValue":49340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075552,"nanos":48220092},"http":{"id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PSMTIbRxxbtnGBYp_9JAcm6kjzPb54UHfSe7AsabGIKQIZbCEfOZ2fzF1ZyM"}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PSMTIbRxxbtnGBYp_9JAcm6kjzPb54UHfSe7AsabGIKQIZbCEfOZ2fzF1ZyM\"}"}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df8ed085-8c9d-4a68-ab4a-e626ba6f295f","keyName":"e2e-rate-a-be895d","subscription":"e2e-rate-iso-a-be895d","tenant":"e2e-shared-a-cda536","userId":"df8ed085-8c9d-4a68-ab4a-e626ba6f295f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536\",\"requestedSubscription\":\"e2e-rate-iso-a-be895d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cda536","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-be895d","namespace":"ai-tenant-e2e-shared-a-cda536","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-be895d"}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df8ed085-8c9d-4a68-ab4a-e626ba6f295f","keyName":"e2e-rate-a-be895d","selected_subscription":"e2e-rate-iso-a-be895d","selected_subscription_key":"ai-tenant-e2e-shared-a-cda536/e2e-rate-iso-a-be895d@ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cda536","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-be895d","namespace":"ai-tenant-e2e-shared-a-cda536","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ab8b64c-3330-4f5f-ba75-dad4f8651e17","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49342","PortSpecifier":{"PortValue":49342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","method":"POST","path":"/ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536/v1/completions","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49342","PortSpecifier":{"PortValue":49342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075553,"nanos":91831453},"http":{"id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PSMTIbRxxbtnGBYp_9JAcm6kjzPb54UHfSe7AsabGIKQIZbCEfOZ2fzF1ZyM"}
{"level":"debug","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PSMTIbRxxbtnGBYp_9JAcm6kjzPb54UHfSe7AsabGIKQIZbCEfOZ2fzF1ZyM\"}"}
{"level":"debug","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df8ed085-8c9d-4a68-ab4a-e626ba6f295f","keyName":"e2e-rate-a-be895d","subscription":"e2e-rate-iso-a-be895d","tenant":"e2e-shared-a-cda536","userId":"df8ed085-8c9d-4a68-ab4a-e626ba6f295f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536\",\"requestedSubscription\":\"e2e-rate-iso-a-be895d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cda536","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-be895d","namespace":"ai-tenant-e2e-shared-a-cda536","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-be895d"}
{"level":"debug","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df8ed085-8c9d-4a68-ab4a-e626ba6f295f","keyName":"e2e-rate-a-be895d","selected_subscription":"e2e-rate-iso-a-be895d","selected_subscription_key":"ai-tenant-e2e-shared-a-cda536/e2e-rate-iso-a-be895d@ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cda536","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-be895d","namespace":"ai-tenant-e2e-shared-a-cda536","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:45:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0e5b4c5-82c5-469d-81cf-eba1019935a3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49356","PortSpecifier":{"PortValue":49356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","method":"POST","path":"/ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536/v1/completions","host":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49356","PortSpecifier":{"PortValue":49356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075554,"nanos":130964368},"http":{"id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","method":"POST","headers":{":authority":"e2e-shared-a-cda536.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PSMTIbRxxbtnGBYp_9JAcm6kjzPb54UHfSe7AsabGIKQIZbCEfOZ2fzF1ZyM"}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PSMTIbRxxbtnGBYp_9JAcm6kjzPb54UHfSe7AsabGIKQIZbCEfOZ2fzF1ZyM\"}"}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df8ed085-8c9d-4a68-ab4a-e626ba6f295f","keyName":"e2e-rate-a-be895d","subscription":"e2e-rate-iso-a-be895d","tenant":"e2e-shared-a-cda536","userId":"df8ed085-8c9d-4a68-ab4a-e626ba6f295f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536\",\"requestedSubscription\":\"e2e-rate-iso-a-be895d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cda536.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cda536","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-be895d","namespace":"ai-tenant-e2e-shared-a-cda536","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-be895d"}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df8ed085-8c9d-4a68-ab4a-e626ba6f295f","keyName":"e2e-rate-a-be895d","selected_subscription":"e2e-rate-iso-a-be895d","selected_subscription_key":"ai-tenant-e2e-shared-a-cda536/e2e-rate-iso-a-be895d@ai-tenant-e2e-shared-a-cda536/rate-test-model-cda536","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cda536","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-be895d","namespace":"ai-tenant-e2e-shared-a-cda536","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59ccca30-fde6-45a7-8d9d-77e2ab7c1ab1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65009185-6313-4bcf-a09d-965da435f49f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49310","PortSpecifier":{"PortValue":49310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65009185-6313-4bcf-a09d-965da435f49f","method":"POST","path":"/ai-tenant-e2e-shared-b-62c45e/rate-test-model-62c45e/v1/completions","host":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65009185-6313-4bcf-a09d-965da435f49f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49310","PortSpecifier":{"PortValue":49310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783075554,"nanos":170544908},"http":{"id":"65009185-6313-4bcf-a09d-965da435f49f","method":"POST","headers":{":authority":"e2e-shared-b-62c45e.apps.4464a487-1761-49a8-bb7e-c92b748eca84.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-62c45e/rate-test-model-62c45e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65009185-6313-4bcf-a09d-965da435f49f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MfKVDsUkB2Iv1z9D_UxPXO465CFJ1eWKb02ILbl2IZbouuzSNzYmpPyt3GDJ"}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65009185-6313-4bcf-a09d-965da435f49f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-62c45e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MfKVDsUkB2Iv1z9D_UxPXO465CFJ1eWKb02ILbl2IZbouuzSNzYmpPyt3GDJ\"}"}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65009185-6313-4bcf-a09d-965da435f49f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-62c45e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"247132ab-ecbf-4421-9a3a-e25c95424831","keyName":"e2e-rate-b-be895d","subscription":"e2e-rate-iso-b-be895d","tenant":"e2e-shared-b-62c45e","userId":"247132ab-ecbf-4421-9a3a-e25c95424831","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65009185-6313-4bcf-a09d-965da435f49f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-62c45e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-62c45e/rate-test-model-62c45e\",\"requestedSubscription\":\"e2e-rate-iso-b-be895d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65009185-6313-4bcf-a09d-965da435f49f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-62c45e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-62c45e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-be895d","namespace":"ai-tenant-e2e-shared-b-62c45e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65009185-6313-4bcf-a09d-965da435f49f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65009185-6313-4bcf-a09d-965da435f49f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65009185-6313-4bcf-a09d-965da435f49f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65009185-6313-4bcf-a09d-965da435f49f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65009185-6313-4bcf-a09d-965da435f49f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-62c45e/rate-test-model-62c45e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65009185-6313-4bcf-a09d-965da435f49f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-be895d"}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65009185-6313-4bcf-a09d-965da435f49f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65009185-6313-4bcf-a09d-965da435f49f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65009185-6313-4bcf-a09d-965da435f49f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"247132ab-ecbf-4421-9a3a-e25c95424831","keyName":"e2e-rate-b-be895d","selected_subscription":"e2e-rate-iso-b-be895d","selected_subscription_key":"ai-tenant-e2e-shared-b-62c45e/e2e-rate-iso-b-be895d@ai-tenant-e2e-shared-b-62c45e/rate-test-model-62c45e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-62c45e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-be895d","namespace":"ai-tenant-e2e-shared-b-62c45e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65009185-6313-4bcf-a09d-965da435f49f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T10:45:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65009185-6313-4bcf-a09d-965da435f49f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ea0cf7c0c724a88879c05a2e31ca1b9649cb5414deeda2526f38368e7217428"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74c16cd8a95fd063062ca395972948c005f81a535add5497dc37a3f09560fbd2"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9e1274370d2885e796af1ac1ea2d9fd9e3e03c4a933621fe9d0297a5b8c69f6"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2627438c4d32cc26fd4ee0bd8e912fc069b0d7423ebc8145bd7131534a9d2ca"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e11cdc72869f30135545def1e217545495c0578689efcffc363997eea9a96e72"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cbc62e9a30a6ba49153476b32e53e6c658f3d4803fc1fff013b32b549abedfc"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2d65c374c49ae3b53d1e62e1ce820be56f3b8ff84013045d295958e13c1ac89"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b20b8941a07bb8416612d847231a6553647a88d2033488a5e80fc75ed530f34a"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/790570402d37cd7a4eeffdc36047f8ea36fb283bc97989b3432abe74198a5bea"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4382cd70cb5186a0bae66ef25df817efcf49a1c6ba3766d2f83e13e727239bd6"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d751eef71f69fbfdf22caea49dfe14c0f5545f56232a681c01b5d6cce8c0feb"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21b3f229804c6abaeff9caf6c71fb42d8e0d9665f4ac2dff0db9a5fe608babb3"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/055aff542cbf37223cf84bd584b06a4b742bee808c90c0b3624fcbdeec4850d2"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5163d452d8a76d2b3709bcd83d4a665765c505ba2a6e82e6e858e4548878aa5"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6fe2ea16568f111f65b00df20fcf03b456343f539c4b4785466f7235b4b3db4"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/117d74744742511463c49de465236d2d1b7b19faecb06243d094ee93bed43185"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be34ad8b277ce7088b789462c552fbf2439914aa14418e73d260bf10a50870bf"}
{"level":"info","ts":"2026-07-03T10:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e095e7301922c490002d3e5f2d1792367db9f44d6485cec0a2cec3e27d2c0537"}
{"level":"info","ts":"2026-07-03T10:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5487e6d37dccd5c74993782bf936c474fca25bf4486e0bc4fe9846b9911980b"}
{"level":"info","ts":"2026-07-03T10:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22dece0f641f1badb084d71e3504651b5924bed19bb77e73b8bd0f28d5a15aa5"}